CVE-2023-52626

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to an operation precedence bug in the port timestamping napi poll context of the net/mlx5e driver. The logic in napi poll context would cause an out-of-bound read by first incrementing the pointer address by byte address space and then dereferencing the value. The intended logic was to dereference first and then increment the underlying value. This is due to the fact that indirection (*) is of lower precedence than postfix increment (++).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.