Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-52466
HistoryFeb 26, 2024 - 12:00 a.m.

CVE-2023-52466

2024-02-2600:00:00
ubuntu.com
ubuntu.com
5
linux kernel
pci vulnerability
out-of-bounds read
coverity
security patch
performance impact

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.0%

In the Linux kernel, the following vulnerability has been resolved: PCI:
Avoid potential out-of-bounds read in pci_dev_for_each_resource() Coverity
complains that pointer in the pci_dev_for_each_resource() may be wrong,
i.e., might be used for the out-of-bounds read. There is no actual issue
right now because we have another check afterwards and the out-of-bounds
read is not being performed. In any case it’s better code with this fixed,
hence the proposed change. As Jonas pointed out “It probably makes the code
slightly less performant as res will now be checked for being not NULL
(which will always be true), but I doubt it will be significant (or in any
hot paths).”

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.0%