CVE-2023-53066

Published: May 2, 2025Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info We have to make sure that the info returned by the helper is valid before using it. Found by Linux Verification Center (linuxtesting.org) with the SVACE static analysis tool.

Affected (10)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	From 4.15 to 4.19.280
Linux Linux Kernel	From 4.20 to 5.4.240
Linux Linux Kernel	From 4.7 to 4.14.312
Linux Linux Kernel	From 5.11 to 5.15.105
Linux Linux Kernel	From 5.16 to 6.1.22
Linux Linux Kernel	From 5.5 to 5.10.177
Linux Linux Kernel	From 6.2 to 6.2.9
Linux Linux Kernel	Version 6.3 rc1
Linux Linux Kernel	Version 6.3 rc2
Linux Linux Kernel	Version 6.3 rc3