Add CVE-2023-3812

Signed-off-by: Denis Efremov <efremov@linux.com>
evdenis · Sep 8, 2023 · 931d379 · 931d379
1 parent d8b4a1d
commit 931d379
Showing 1 changed file with 24 additions and 0 deletions.
diff --git a/cvehound/cve/CVE-2023-3812.cocci b/cvehound/cve/CVE-2023-3812.cocci
@@ -0,0 +1,24 @@
+/// Files: drivers/net/tun.c
+/// Fix: 363a5328f4b0517e59572118ccfb7c626d81dca9
+/// Fixes: 90e33d45940793def6f773b2d528e9f3c84ffdc7
+
+virtual detect
+
+@err@
+identifier it;
+position p;
+@@
+
+tun_napi_alloc_frags(..., const struct iov_iter *it)
+{
+	...
+*	if (it->nr_segs > MAX_SKB_FRAGS + 1)@p
+*		return ERR_PTR(\(-EMSGSIZE\|-ENOMEM\));
+	...
+}
+
+@script:python depends on detect@
+p << err.p;
+@@
+
+coccilib.report.print_report(p[0], 'ERROR: CVE-2023-3812')