An out-of-bounds read flaw was found in pci_dev_for_each_resource() in the Linux Kernel. The pointer in the pci_dev_for_each_resource() may be wrong. For example, it might be used for the out-of-bounds read. This issue was identified by the Coverity static analysis tool, which flagged a pointer (res) that could be used incorrectly, potentially leading to accessing memory outside its bounds.
No mitigation is currently available for this vulnerability. Make sure to perform the updates as they become available.
bugzilla.redhat.com/show_bug.cgi?id=2266210
git.kernel.org/stable/c/3171e46d677a668eed3086da78671f1e4f5b8405
git.kernel.org/stable/c/5b3e25efe16e06779a9a7c7610217c1b921ec179
git.kernel.org/stable/c/bd26159dcaaa3e9a927070efd348e7ce7e5ee933
nvd.nist.gov/vuln/detail/CVE-2023-52466
www.cve.org/CVERecord?id=CVE-2023-52466