CVE-2023-53681

Summary

In the Linux kernel, the following vulnerability has been resolved:

bcache: Fix __bch_btree_node_alloc to make the failure behavior consistent

In some specific situations, the return value of __bch_btree_node_alloc may be NULL. This may lead to a potential NULL pointer dereference in caller function like a calling chain : btree_split->bch_btree_node_alloc->__bch_btree_node_alloc.

Fix it by initializing the return value in __bch_btree_node_alloc.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxcafe563591446cf80bfbc2fe3bc72a2e36cf1060 < 587b4e8bb5dac682f09280ab35db4632b29d5ac4affected
LinuxLinuxcafe563591446cf80bfbc2fe3bc72a2e36cf1060 < b070f29a61436f6f8a2e3abc7ea4f4be81695198affected
LinuxLinuxcafe563591446cf80bfbc2fe3bc72a2e36cf1060 < a4405f6ee03323410d7b10966fd67b35f71b1944affected
LinuxLinuxcafe563591446cf80bfbc2fe3bc72a2e36cf1060 < f67b0e3081f2a24170280a33ac66f6b112083c03affected
LinuxLinuxcafe563591446cf80bfbc2fe3bc72a2e36cf1060 < 7ecea5ce3dc17339c280c75b58ac93d8c8620d9faffected
LinuxLinuxcafe563591446cf80bfbc2fe3bc72a2e36cf1060 < 4514847aee18d9391a0cf3aad75d3567c72795a4affected
LinuxLinuxcafe563591446cf80bfbc2fe3bc72a2e36cf1060 < 80fca8a10b604afad6c14213fdfd816c4eda3ee4affected
LinuxLinux3.10affected
LinuxLinux0 < 3.10unaffected
LinuxLinux4.19.291 <= 4.19.*unaffected
LinuxLinux5.4.253 <= 5.4.*unaffected
LinuxLinux5.10.188 <= 5.10.*unaffected
LinuxLinux5.15.121 <= 5.15.*unaffected
LinuxLinux6.1.39 <= 6.1.*unaffected
LinuxLinux6.4.4 <= 6.4.*unaffected
LinuxLinux6.5 <= *unaffected

Weaknesses

References