Messages in this thread | | | Date | Tue, 27 Feb 2024 14:26:26 +0100 | From | Greg Kroah-Hartman <> | Subject | Re: CVE-2023-52466: PCI: Avoid potential out-of-bounds read in pci_dev_for_each_resource() |
| |
On Tue, Feb 27, 2024 at 02:18:51PM +0100, Carlos López wrote: > > Hi, > > On 25/2/24 9:16, Greg Kroah-Hartman wrote: > > There is no actual issue right now because we have another check afterwards > > and the out-of-bounds read is not being performed. In any case it's better > > code with this fixed, hence the proposed change. > > Given that there is no actual security issue this looks more like a > hardening, and thus not deserving of a CVE, no?
This was a tricky one, I think it's needed as we do not know how people are really using these macros, right? If the PCI maintainer agrees (on the cc:), I'll be glad to revoke it, it's their call.
And thanks for the review, much appreciated!
greg k-h
| |