cve/2023/CVE-2023-52616.md

18 lines
951 B
Markdown
Raw Normal View History

2024-05-28 08:49:17 +00:00
### [CVE-2023-52616](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52616)
![](https://img.shields.io/static/v1?label=Product&message=Linux&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=d58bb7e55a8a%3C%200c3687822259%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
### Description
In the Linux kernel, the following vulnerability has been resolved:crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_initWhen the mpi_ec_ctx structure is initialized, some fields are notcleared, causing a crash when referencing the field when thestructure was released. Initially, this issue was ignored becausememory for mpi_ec_ctx is allocated with the __GFP_ZERO flag.For example, this error will be triggered when calculating theZa value for SM2 separately.
### POC
#### Reference
No PoCs from references.
#### Github
- https://github.com/NaInSec/CVE-LIST