CVE-2023-52512

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-52512
In the Linux kernel, the following vulnerability has been resolved: pinctrl: nuvoton: wpcm450: fix out of bounds write Write into 'pctrl->gpio_bank' happens before the check for GPIO index validity, so out of bounds write may happen. Found by Linux Verification Center (linuxtesting.org) with SVACE.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/6c18c386fd13dbb3ff31a1086dabb526780d9bda Patch
https://git.kernel.org/stable/c/87d315a34133edcb29c4cadbf196ec6c30dfd47b Patch
https://git.kernel.org/stable/c/c9d7cac0fd27c74dd368e80dc4b5d0f9f2e13cf8 Patch
https://git.kernel.org/stable/c/6c18c386fd13dbb3ff31a1086dabb526780d9bda Patch
https://git.kernel.org/stable/c/87d315a34133edcb29c4cadbf196ec6c30dfd47b Patch
https://git.kernel.org/stable/c/c9d7cac0fd27c74dd368e80dc4b5d0f9f2e13cf8 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.6:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.6:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.6:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.6:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.6:rc5:*:*:*:*:*:*
History

19 Mar 2025, 16:24

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/6c18c386fd13dbb3ff31a1086dabb526780d9bda - () https://git.kernel.org/stable/c/6c18c386fd13dbb3ff31a1086dabb526780d9bda - Patch
References () https://git.kernel.org/stable/c/87d315a34133edcb29c4cadbf196ec6c30dfd47b - () https://git.kernel.org/stable/c/87d315a34133edcb29c4cadbf196ec6c30dfd47b - Patch
References () https://git.kernel.org/stable/c/c9d7cac0fd27c74dd368e80dc4b5d0f9f2e13cf8 - () https://git.kernel.org/stable/c/c9d7cac0fd27c74dd368e80dc4b5d0f9f2e13cf8 - Patch
First Time Linux
Linux linux Kernel
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.6:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.6:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.6:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.6:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.6:rc3:*:*:*:*:*:*

21 Nov 2024, 08:39

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/6c18c386fd13dbb3ff31a1086dabb526780d9bda - () https://git.kernel.org/stable/c/6c18c386fd13dbb3ff31a1086dabb526780d9bda -
References () https://git.kernel.org/stable/c/87d315a34133edcb29c4cadbf196ec6c30dfd47b - () https://git.kernel.org/stable/c/87d315a34133edcb29c4cadbf196ec6c30dfd47b -
References () https://git.kernel.org/stable/c/c9d7cac0fd27c74dd368e80dc4b5d0f9f2e13cf8 - () https://git.kernel.org/stable/c/c9d7cac0fd27c74dd368e80dc4b5d0f9f2e13cf8 -

06 Nov 2024, 16:35

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE CWE-787
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: pinctrl: nuvoton: wpcm450: corregir escritura fuera de los límites La escritura en 'pctrl->gpio_bank' ocurre antes de verificar la validez del índice GPIO, por lo que puede ocurrir una escritura fuera de los límites. Encontrado por el Centro de verificación de Linux (linuxtesting.org) con SVACE.

02 Mar 2024, 22:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-03-02 22:15

Updated : 2025-03-19 16:24

NVD link : CVE-2023-52512

Mitre link : CVE-2023-52512

CVE.ORG link : CVE-2023-52512

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-787

Out-of-bounds Write