CVE-2023-52687

crypto: safexcel - Add error handling for dma_map_sg() calls

State: Published
Severity: 9.8 Critical
Published: May 17, 2024
Updated: Aug 5, 2026
Reserved: Mar 7, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: safexcel - Add error handling for dma_map_sg() calls

Macro dma_map_sg() may return 0 on error. This patch enables checks in case of the macro failure and ensures unmapping of previously mapped buffers with dma_unmap_sg().

Found by Linux Verification Center (linuxtesting.org) with static analysis tool SVACE.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	49186a7d9e46ff132a0ed9b721ad6b6a58dba6c1 to before 4c0ac81a172a69a7733290915276672787e904ecAffected 49186a7d9e46ff132a0ed9b721ad6b6a58dba6c1 to before 8084b788c2fb1260f7d44c032d5124680b20d2b2Affected 49186a7d9e46ff132a0ed9b721ad6b6a58dba6c1 to before fc0b785802b856566df3ac943e38a072557001c4Affected 49186a7d9e46ff132a0ed9b721ad6b6a58dba6c1 to before 87e02063d07708cac5bfe9fd3a6a242898758ac8Affected
LinuxLinux	6.1Affected before 6.1Not affected 6.1.75 through 6.1.Not affected 6.6.14 through 6.6.Not affected 6.7.2 through 6.7.*Not affected 6.8 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.