CVE-2023-52626

net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context

published March 26, 2024

CVSS
—
EPSS
0%
Percentile
13.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context

Indirection (*) is of lower precedence than postfix increment (++). Logic

in napi_poll context would cause an out-of-bound read by first increment

the pointer address by byte address space and then dereference the value.

Rather, the intended logic was to dereference first and then increment the

underlying value.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00237 · 13.9th percentile
Published
2024-03-26T17:49Z
EPSS history
Timeline
  • 26 MAR 17:49Z
    net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context
    cvelistv5