nr_targets on error in cxl_region_attach()") tried to avoid 'eiw' initialization errors when ->nr_targets exceeded 16, by just decrementing ->nr_targets when cxl_region_setup_targets() failed. Commit 86987c766276 ("cxl/region: Cleanup target list on attach error") extended that cleanup to also clear cxled->pos and p->targets[pos]. The initialization error was incidentally fixed separately by: Commit 8d4285425714 ("cxl/region: Fix port setup uninitialized variable warnings") which was merged a few days after 5e42bcbc3fef. But now the original cleanup when cxl_region_setup_targets() fails prevents endpoint and switch decoder resources from being reused: 1) the cleanup does not set the decoder's region to NULL, which results in future dpa_size_store() calls returning -EBUSY 2) the decoder is not properly freed, which results in future commit errors associated with the upstream switch Now that the initialization errors were fixed separately, the proper cleanup for this case is to just return immediately. Then the resources associated with this target get cleanup up as normal when the failed region is deleted. The ->nr_targets decrement in the error case also helped prevent a p->targets[] array overflow, so add a new check to prevent against that overflow. Tested by trying to create an invalid region for a 2 switch * 2 endpoint topology, and then following up with creating a valid region. "> nr_targets,on error,in,cxl_region_attach()"),tried,to,avoid,'eiw',initialization errors,when,->nr_targets,exceeded,16,,by,just,decrementing ->nr_targets,when,cxl_region_setup_targets(),failed.,Commit 86987c766276,("cxl/region:,Cleanup,target,list,on,attach,error") extended,that,cleanup,to,also,clear,cxled->pos,and,p->targets[pos]. The,initialization,error,was,incidentally,fixed,separately,by:,Commit 8d4285425714,("cxl/region:,Fix,port,setup,uninitialized,variable warnings"),which,was,merged,a,few,days,after,5e42bcbc3fef.,But,now,the original,cleanup,when,cxl_region_setup_targets(),fails,prevents endpoint,and,switch,decoder,resources,from,being,reused:,1),the cleanup,does,not,set,the,decoder's,region,to,NULL,,which,results,in future,dpa_size_store(),calls,returning,-EBUSY,2),the,decoder,is,not properly,freed,,which,results,in,future,commit,errors,associated,with the,upstream,switch,Now,that,the,initialization,errors,were,fixed separately,,the,proper,cleanup,for,this,case,is,to,just,return immediately.,Then,the,resources,associated,with,this,target,get cleanup,up,as,normal,when,the,failed,region,is,deleted.,The ->nr_targets,decrement,in,the,error,case,also,helped,prevent,a p->targets[],array,overflow,,so,add,a,new,check,to,prevent,against that,overflow.,Tested,by,trying,to,create,an,invalid,region,for,a,2 switch,*,2,endpoint,topology,,and,then,following,up,with,creating,a valid,region. "> SecuritySpace - CVE-2023-52792
 
English | Deutsch | Español
 
Home ▼
Home About Us Contact Us Privacy Partner Programs Testimonials In Press Mailing Lists Abuse Developer APIs
Bookkeeping
Online ▼
Home Free Trial FAQ
Open/Create Company File Accept an Invite Order/Renew
Security
Audits ▼
Home Dedicated audits Advanced audits Standard audits Recurring audits No Risk audits Desktop audits Basic audit Security Seal FAQ Price/Feature Summary Order New Tests All Tests Confidentiality Vulnerability search Run Audit Scheduler IP Permissions Audit Configuration Editor Scan Queue Reminder Notification Schedule Seal Reports Reports Style Editor
Managed
DNS ▼
About Order FAQ Acceptable Use Policy Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password
Network
Monitor ▼
Enterprise Package Advanced Package Standard Package Free Trial FAQ Price/Feature Summary Order/Renew Examples
Configure/Status Alert Profiles
Research
Reports ▼
Home FAQ Glossary Archive
 Login/Register 
 
 Vulnerability   
Search   		     Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2023-52792
Description:In the Linux kernel, the following vulnerability has been resolved: cxl/region: Do not try to cleanup after cxl_region_setup_targets() fails Commit 5e42bcbc3fef ("cxl/region: decrement ->nr_targets on error in cxl_region_attach()") tried to avoid 'eiw' initialization errors when ->nr_targets exceeded 16, by just decrementing ->nr_targets when cxl_region_setup_targets() failed. Commit 86987c766276 ("cxl/region: Cleanup target list on attach error") extended that cleanup to also clear cxled->pos and p->targets[pos]. The initialization error was incidentally fixed separately by: Commit 8d4285425714 ("cxl/region: Fix port setup uninitialized variable warnings") which was merged a few days after 5e42bcbc3fef. But now the original cleanup when cxl_region_setup_targets() fails prevents endpoint and switch decoder resources from being reused: 1) the cleanup does not set the decoder's region to NULL, which results in future dpa_size_store() calls returning -EBUSY 2) the decoder is not properly freed, which results in future commit errors associated with the upstream switch Now that the initialization errors were fixed separately, the proper cleanup for this case is to just return immediately. Then the resources associated with this target get cleanup up as normal when the failed region is deleted. The ->nr_targets decrement in the error case also helped prevent a p->targets[] array overflow, so add a new check to prevent against that overflow. Tested by trying to create an invalid region for a 2 switch * 2 endpoint topology, and then following up with creating a valid region.
Test IDs: None available
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2023-52792
https://git.kernel.org/stable/c/0718588c7aaa7a1510b4de972370535b61dddd0d
https://git.kernel.org/stable/c/0718588c7aaa7a1510b4de972370535b61dddd0d
https://git.kernel.org/stable/c/07ffcd8ec79cf7383e1e45815f4842fd357991c2
https://git.kernel.org/stable/c/07ffcd8ec79cf7383e1e45815f4842fd357991c2
https://git.kernel.org/stable/c/9090c5537c93cd0811ab7bfbd925b57addfffb60
https://git.kernel.org/stable/c/9090c5537c93cd0811ab7bfbd925b57addfffb60
https://git.kernel.org/stable/c/90db4c1d5ebaf574d3c3065c055977982c378a83
https://git.kernel.org/stable/c/90db4c1d5ebaf574d3c3065c055977982c378a83



© 1998-2025 E-Soft Inc. All rights reserved.