CVE-2023-53817

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel's crypto/lib/mpi module, specifically within the mpi cmp ui() function, which can lead to a null pointer dereference. This issue occurs during NVMeTCP Authentication when a controller specifies the 8192-bit Diffie Hellman group and provides a zeroed Diffie Hellman value. The mpi cmp ui() function incorrectly handles this scenario, causing a dereference of the null pointer u->d.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.