NetSight
IP …
medium5.5

CVE-2023-52429

dm_table_create in drivers/md/dm-table.c in the Linux kernel through 6.7.4 can attempt to (in alloc_targets) allocate more than INT_MAX bytes, and crash, becau…

Impact

dm_table_create in drivers/md/dm-table.c in the Linux kernel through 6.7.4 can attempt to (in alloc_targets) allocate more than INT_MAX bytes, and crash, because of a missing check for struct dm_ioctl.target_count.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 5.10.210
from 5.11.0 before 5.15.149
from 5.16.0 before 6.1.79
from 6.2.0 before 6.6.18
from 6.7.0 before 6.7.6
FedoraprojectFedora
Versions 38, 39

Weakness classification

CWE-754CWE-789

References