CVE-2023-52687
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk45th percentile - higher than 45% of all known CVEs
Summary
In the Linux kernel, the crypto/safexcel subsystem lacks error handling for dma_map_sg() calls. The dma_map_sg() macro may return 0 on error. The fix adds checks in case of macro failure and ensures unmapping of previously mapped buffers with dma_unmap_sg().
Risk Assessment
Lack of error handling could lead to malfunction of the hardware cryptographic accelerator, potentially resulting in system crash or incorrect cryptographic operations.
Recommendation
It is recommended to update the Linux kernel to a version containing the fix that adds error handling for dma_map_sg() in the safexcel module.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: crypto: safexcel - Add error handling for dma_map_sg() calls Macro dma_map_sg() may return 0 on error. This patch enables checks in case of the macro failure and ensures unmapping of previously mapped buffers with dma_unmap_sg(). Found by Linux Verification Center (linuxtesting.org) with static analysis tool SVACE.