CVE-2023-52918

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-52918
In the Linux kernel, the following vulnerability has been resolved: media: pci: cx23885: check cx23885_vdev_init() return cx23885_vdev_init() can return a NULL pointer, but that pointer is used in the next line without a check. Add a NULL pointer check and go to the error unwind if it is NULL.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/06ee04a907d64ee3910fecedd05d7f1be4b1b70e Patch
https://git.kernel.org/stable/c/15126b916e39b0cb67026b0af3c014bfeb1f76b3 Patch
https://git.kernel.org/stable/c/199a42fc4c45e8b7f19efeb15dbc36889a599ac2 Patch
https://git.kernel.org/stable/c/8e31b096e2e1949bc8f0be019c9ae70d414404c6 Patch
https://git.kernel.org/stable/c/a5f1d30c51c485cec7a7de60205667c3ff86c303 Patch
https://git.kernel.org/stable/c/b1397fb4a779fca560c43d2acf6702d41b4a495b Patch
https://git.kernel.org/stable/c/e7385510e2550a9f8b6f3d5f33c5b894ab9ba976 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

24 Oct 2024, 03:55

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/06ee04a907d64ee3910fecedd05d7f1be4b1b70e - () https://git.kernel.org/stable/c/06ee04a907d64ee3910fecedd05d7f1be4b1b70e - Patch
References () https://git.kernel.org/stable/c/15126b916e39b0cb67026b0af3c014bfeb1f76b3 - () https://git.kernel.org/stable/c/15126b916e39b0cb67026b0af3c014bfeb1f76b3 - Patch
References () https://git.kernel.org/stable/c/199a42fc4c45e8b7f19efeb15dbc36889a599ac2 - () https://git.kernel.org/stable/c/199a42fc4c45e8b7f19efeb15dbc36889a599ac2 - Patch
References () https://git.kernel.org/stable/c/8e31b096e2e1949bc8f0be019c9ae70d414404c6 - () https://git.kernel.org/stable/c/8e31b096e2e1949bc8f0be019c9ae70d414404c6 - Patch
References () https://git.kernel.org/stable/c/a5f1d30c51c485cec7a7de60205667c3ff86c303 - () https://git.kernel.org/stable/c/a5f1d30c51c485cec7a7de60205667c3ff86c303 - Patch
References () https://git.kernel.org/stable/c/b1397fb4a779fca560c43d2acf6702d41b4a495b - () https://git.kernel.org/stable/c/b1397fb4a779fca560c43d2acf6702d41b4a495b - Patch
References () https://git.kernel.org/stable/c/e7385510e2550a9f8b6f3d5f33c5b894ab9ba976 - () https://git.kernel.org/stable/c/e7385510e2550a9f8b6f3d5f33c5b894ab9ba976 - Patch
First Time Linux linux Kernel
Linux
CWE CWE-476
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

23 Oct 2024, 15:12

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: media: pci: cx23885: check cx23885_vdev_init() return cx23885_vdev_init() puede devolver un puntero NULL, pero ese puntero se utiliza en la siguiente línea sin una comprobación. Agregue una comprobación de puntero NULL y vaya al desenrollado de error si es NULL.

22 Oct 2024, 08:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-10-22 08:15

Updated : 2024-10-24 03:55

NVD link : CVE-2023-52918

Mitre link : CVE-2023-52918

CVE.ORG link : CVE-2023-52918

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference