Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-53066

In the Linux kernel, the following vulnerability has been resolved: qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info We have to make sure that the info returned by the helper is valid before using it. Found by Linux Verification Center (linuxtesting.org) with the SVACE static analysis tool.

Published

2025-05-02T16:15:25.673

Last Modified

2025-11-12T19:47:44.900

Status

Analyzed

Source

416baaa9-dc9f-4396-8d5f-8c081fb06d67

Severity

CVSSv3.1: 5.5 (MEDIUM)

Weaknesses
  • Type: Primary
    CWE-476
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System linux linux_kernel < 4.14.312 Yes
Operating System linux linux_kernel < 4.19.280 Yes
Operating System linux linux_kernel < 5.4.240 Yes
Operating System linux linux_kernel < 5.10.177 Yes
Operating System linux linux_kernel < 5.15.105 Yes
Operating System linux linux_kernel < 6.1.22 Yes
Operating System linux linux_kernel < 6.2.9 Yes
Operating System linux linux_kernel 6.3 Yes
Operating System linux linux_kernel 6.3 Yes
Operating System linux linux_kernel 6.3 Yes
References