OpenCVE

In the Linux kernel, the following vulnerability has been resolved: tty: vcc: Add check for kstrdup() in vcc_probe() Add check for the return value of kstrdup() and return the error, if it fails in order to avoid NULL pointer dereference.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/38cd56fc9de78bf3c878790785e8c231116ef9d3
https://git.kernel.org/stable/c/460284dfb10b207980c6f3f7046e33446ceb38ac
https://git.kernel.org/stable/c/4a24a31826246b15477399febd13292b0c9f0ee9
https://git.kernel.org/stable/c/4ef41a7f33ffe1a335e7db7e1564ddc6afad47cc
https://git.kernel.org/stable/c/6c80f48912b5bd4965352d1a9a989e21743a4a06
https://git.kernel.org/stable/c/7cebc86481bf16049e266f6774d90f2fd4f8d5d2
https://git.kernel.org/stable/c/8f8771757b130383732195497e47fba2aba76d3a
https://git.kernel.org/stable/c/909963e0c16778cec28efb1affc21558825f4200
https://git.kernel.org/stable/c/d81ffb87aaa75f842cd7aa57091810353755b3e6
https://lore.kernel.org/linux-cve-announce/2024052156-CVE-2023-52789-6006@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2023-52789
https://www.cve.org/CVERecord?id=CVE-2023-52789

History

Mon, 04 Nov 2024 15:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-05-21T15:31:05.616Z

Updated: 2024-11-04T14:52:46.533Z

Reserved: 2024-05-21T15:19:24.241Z

Link: CVE-2023-52789

Vulnrichment

Updated: 2024-08-02T23:11:35.668Z

NVD

Status : Awaiting Analysis

Published: 2024-05-21T16:15:17.637

Modified: 2024-11-21T08:40:35.517

Link: CVE-2023-52789

Redhat

Severity : Moderate

Publid Date: 2024-05-21T00:00:00Z

Links: CVE-2023-52789 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-52789", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-05-21T15:19:24.241Z", "datePublished": "2024-05-21T15:31:05.616Z", "dateUpdated": "2024-11-04T14:52:46.533Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-11-04T14:52:46.533Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntty: vcc: Add check for kstrdup() in vcc_probe()\n\nAdd check for the return value of kstrdup() and return the error, if it\nfails in order to avoid NULL pointer dereference."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/tty/vcc.c"], "versions": [{"version": "1da177e4c3f4", "lessThan": "38cd56fc9de7", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "909963e0c167", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "460284dfb10b", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "4ef41a7f33ff", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "6c80f48912b5", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "7cebc86481bf", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "4a24a3182624", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "8f8771757b13", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "d81ffb87aaa7", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/tty/vcc.c"], "versions": [{"version": "4.14.331", "lessThanOrEqual": "4.14.*", "status": "unaffected", "versionType": "semver"}, {"version": "4.19.300", "lessThanOrEqual": "4.19.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.4.262", "lessThanOrEqual": "5.4.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.202", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.140", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.64", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.5.13", "lessThanOrEqual": "6.5.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.3", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.7", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/38cd56fc9de78bf3c878790785e8c231116ef9d3"}, {"url": "https://git.kernel.org/stable/c/909963e0c16778cec28efb1affc21558825f4200"}, {"url": "https://git.kernel.org/stable/c/460284dfb10b207980c6f3f7046e33446ceb38ac"}, {"url": "https://git.kernel.org/stable/c/4ef41a7f33ffe1a335e7db7e1564ddc6afad47cc"}, {"url": "https://git.kernel.org/stable/c/6c80f48912b5bd4965352d1a9a989e21743a4a06"}, {"url": "https://git.kernel.org/stable/c/7cebc86481bf16049e266f6774d90f2fd4f8d5d2"}, {"url": "https://git.kernel.org/stable/c/4a24a31826246b15477399febd13292b0c9f0ee9"}, {"url": "https://git.kernel.org/stable/c/8f8771757b130383732195497e47fba2aba76d3a"}, {"url": "https://git.kernel.org/stable/c/d81ffb87aaa75f842cd7aa57091810353755b3e6"}], "title": "tty: vcc: Add check for kstrdup() in vcc_probe()", "x_generator": {"engine": "bippy-9e1c9544281a"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-52789", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-05-21T17:26:54.599134Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T17:23:29.225Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T23:11:35.668Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/38cd56fc9de78bf3c878790785e8c231116ef9d3", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/909963e0c16778cec28efb1affc21558825f4200", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/460284dfb10b207980c6f3f7046e33446ceb38ac", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/4ef41a7f33ffe1a335e7db7e1564ddc6afad47cc", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/6c80f48912b5bd4965352d1a9a989e21743a4a06", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/7cebc86481bf16049e266f6774d90f2fd4f8d5d2", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/4a24a31826246b15477399febd13292b0c9f0ee9", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/8f8771757b130383732195497e47fba2aba76d3a", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/d81ffb87aaa75f842cd7aa57091810353755b3e6", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/38cd56fc9de78bf3c878790785e8c231116ef9d3", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/909963e0c16778cec28efb1affc21558825f4200", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/460284dfb10b207980c6f3f7046e33446ceb38ac", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/4ef41a7f33ffe1a335e7db7e1564ddc6afad47cc", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/6c80f48912b5bd4965352d1a9a989e21743a4a06", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/7cebc86481bf16049e266f6774d90f2fd4f8d5d2", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/4a24a31826246b15477399febd13292b0c9f0ee9", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/8f8771757b130383732195497e47fba2aba76d3a", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/d81ffb87aaa75f842cd7aa57091810353755b3e6", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T23:11:35.668Z"}}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-52789", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-05-21T17:26:54.599134Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-23T19:01:25.251Z"}, "title": "CISA ADP Vulnrichment"}], "cna": {"title": "tty: vcc: Add check for kstrdup() in vcc_probe()", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "1da177e4c3f4", "lessThan": "38cd56fc9de7", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "909963e0c167", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "460284dfb10b", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "4ef41a7f33ff", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "6c80f48912b5", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "7cebc86481bf", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "4a24a3182624", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "8f8771757b13", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "d81ffb87aaa7", "versionType": "git"}], "programFiles": ["drivers/tty/vcc.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "unaffected", "version": "4.14.331", "versionType": "semver", "lessThanOrEqual": "4.14.*"}, {"status": "unaffected", "version": "4.19.300", "versionType": "semver", "lessThanOrEqual": "4.19.*"}, {"status": "unaffected", "version": "5.4.262", "versionType": "semver", "lessThanOrEqual": "5.4.*"}, {"status": "unaffected", "version": "5.10.202", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.140", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.64", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.5.13", "versionType": "semver", "lessThanOrEqual": "6.5.*"}, {"status": "unaffected", "version": "6.6.3", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.7", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/tty/vcc.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/38cd56fc9de78bf3c878790785e8c231116ef9d3"}, {"url": "https://git.kernel.org/stable/c/909963e0c16778cec28efb1affc21558825f4200"}, {"url": "https://git.kernel.org/stable/c/460284dfb10b207980c6f3f7046e33446ceb38ac"}, {"url": "https://git.kernel.org/stable/c/4ef41a7f33ffe1a335e7db7e1564ddc6afad47cc"}, {"url": "https://git.kernel.org/stable/c/6c80f48912b5bd4965352d1a9a989e21743a4a06"}, {"url": "https://git.kernel.org/stable/c/7cebc86481bf16049e266f6774d90f2fd4f8d5d2"}, {"url": "https://git.kernel.org/stable/c/4a24a31826246b15477399febd13292b0c9f0ee9"}, {"url": "https://git.kernel.org/stable/c/8f8771757b130383732195497e47fba2aba76d3a"}, {"url": "https://git.kernel.org/stable/c/d81ffb87aaa75f842cd7aa57091810353755b3e6"}], "x_generator": {"engine": "bippy-9e1c9544281a"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntty: vcc: Add check for kstrdup() in vcc_probe()\n\nAdd check for the return value of kstrdup() and return the error, if it\nfails in order to avoid NULL pointer dereference."}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-11-04T14:52:46.533Z"}}}, "cveMetadata": {"cveId": "CVE-2023-52789", "state": "PUBLISHED", "dateUpdated": "2024-11-04T14:52:46.533Z", "dateReserved": "2024-05-21T15:19:24.241Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-05-21T15:31:05.616Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}

{"descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntty: vcc: Add check for kstrdup() in vcc_probe()\n\nAdd check for the return value of kstrdup() and return the error, if it\nfails in order to avoid NULL pointer dereference."}, {"lang": "es", "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: tty: vcc: Agregar verificaci\u00f3n para kstrdup() en vcc_probe(). Agregar verificaci\u00f3n para el valor de retorno de kstrdup() y devolver el error, si falla, para evitar la desreferencia de puntero NULL ."}], "id": "CVE-2023-52789", "lastModified": "2024-11-21T08:40:35.517", "metrics": {}, "published": "2024-05-21T16:15:17.637", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/38cd56fc9de78bf3c878790785e8c231116ef9d3"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/460284dfb10b207980c6f3f7046e33446ceb38ac"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/4a24a31826246b15477399febd13292b0c9f0ee9"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/4ef41a7f33ffe1a335e7db7e1564ddc6afad47cc"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/6c80f48912b5bd4965352d1a9a989e21743a4a06"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/7cebc86481bf16049e266f6774d90f2fd4f8d5d2"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/8f8771757b130383732195497e47fba2aba76d3a"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/909963e0c16778cec28efb1affc21558825f4200"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/d81ffb87aaa75f842cd7aa57091810353755b3e6"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://git.kernel.org/stable/c/38cd56fc9de78bf3c878790785e8c231116ef9d3"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://git.kernel.org/stable/c/460284dfb10b207980c6f3f7046e33446ceb38ac"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://git.kernel.org/stable/c/4a24a31826246b15477399febd13292b0c9f0ee9"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://git.kernel.org/stable/c/4ef41a7f33ffe1a335e7db7e1564ddc6afad47cc"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://git.kernel.org/stable/c/6c80f48912b5bd4965352d1a9a989e21743a4a06"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://git.kernel.org/stable/c/7cebc86481bf16049e266f6774d90f2fd4f8d5d2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://git.kernel.org/stable/c/8f8771757b130383732195497e47fba2aba76d3a"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://git.kernel.org/stable/c/909963e0c16778cec28efb1affc21558825f4200"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://git.kernel.org/stable/c/d81ffb87aaa75f842cd7aa57091810353755b3e6"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Awaiting Analysis"}