CVE-2023-52762
Assigner: Linux
Published: 2024-05-21T15:30:47.724Z
State: PUBLISHED
descriptions: value: In the Linux kernel, the following vulnerability has been resolved:

virtio-blk: fix implicit overflow on virtio_max_dma_size

The following codes have an implicit conversion from size_t to u32:
(u32)max_size = (size_t)virtio_max_dma_size(vdev);

This may lead overflow, Ex (size_t)4G -> (u32)0. Once
virtio_max_dma_size() has a larger size than U32_MAX, use U32_MAX
instead.
affected: product: Linux
vendor: Linux
defaultStatus: unaffected
repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
versions: version: 1da177e4c3f4
lessThan: 72775cad7f57
status: affected
versionType: git
version: 1da177e4c3f4
lessThan: 472bd4787406
status: affected
versionType: git
version: 1da177e4c3f4
lessThan: 017278f14114
status: affected
versionType: git
version: 1da177e4c3f4
lessThan: d667fe301dcb
status: affected
versionType: git
version: 1da177e4c3f4
lessThan: fafb51a67fb8
status: affected
versionType: git
product: Linux
vendor: Linux
defaultStatus: affected
repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
versions: version: 5.15.140
lessThanOrEqual: 5.15.*
status: unaffected
versionType: custom
version: 6.1.64
lessThanOrEqual: 6.1.*
status: unaffected
versionType: custom
version: 6.5.13
lessThanOrEqual: 6.5.*
status: unaffected
versionType: custom
version: 6.6.3
lessThanOrEqual: 6.6.*
status: unaffected
versionType: custom
version: 6.7
lessThanOrEqual: *
status: unaffected
versionType: original_commit_for_fix
title: virtio-blk: fix implicit overflow on virtio_max_dma_size
x_generator: engine: bippy-d175d3acf727