CVE-2023-52871 - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: llcc: Handle a second device without data corruption Usually there is only one llcc device. But if there were a second, even a failed probe call would modify the global drv_data pointer. So check if drv_data is valid before overwriting it.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/1143bfb9b055897975aeaea254da148e19524493
https://git.kernel.org/stable/c/3565684309e54fa998ea27f37028d67cc3e1dff2
https://git.kernel.org/stable/c/5e5b85ea0f4bc484bfe4cc73ead51fa48d2366a0
https://git.kernel.org/stable/c/995ee1e84e8db7fa5dcdde7dfe0bd7bb6f9bbb8c
https://git.kernel.org/stable/c/cc1a1dcb411fe224f48553cfdcdfe6e61395b69c
https://git.kernel.org/stable/c/f0ef883cae309bc5e8cdfcdbc1b4822732ce20a8
https://git.kernel.org/stable/c/f1a1bc8775b26345aba2be278118999e7f661d3d
https://lore.kernel.org/linux-cve-announce/2024052120-CVE-2023-52871-eaa4@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2023-52871
https://www.cve.org/CVERecord?id=CVE-2023-52871

History

No history.

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-05-21T15:32:00.922Z

Updated: 2024-11-04T14:54:17.175Z

Reserved: 2024-05-21T15:19:24.263Z

Link: CVE-2023-52871

Vulnrichment

Updated: 2024-08-02T23:11:36.044Z

NVD

Status : Awaiting Analysis

Published: 2024-05-21T16:15:23.907

Modified: 2024-05-21T16:53:56.550

Link: CVE-2023-52871

Redhat

Severity : Low

Publid Date: 2024-05-21T00:00:00Z

Links: CVE-2023-52871 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-52871", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-05-21T15:19:24.263Z", "datePublished": "2024-05-21T15:32:00.922Z", "dateUpdated": "2024-11-04T14:54:17.175Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-11-04T14:54:17.175Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nsoc: qcom: llcc: Handle a second device without data corruption\n\nUsually there is only one llcc device. But if there were a second, even\na failed probe call would modify the global drv_data pointer. So check\nif drv_data is valid before overwriting it."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/soc/qcom/llcc-qcom.c"], "versions": [{"version": "a3134fb09e0b", "lessThan": "cc1a1dcb411f", "status": "affected", "versionType": "git"}, {"version": "a3134fb09e0b", "lessThan": "5e5b85ea0f4b", "status": "affected", "versionType": "git"}, {"version": "a3134fb09e0b", "lessThan": "995ee1e84e8d", "status": "affected", "versionType": "git"}, {"version": "a3134fb09e0b", "lessThan": "f0ef883cae30", "status": "affected", "versionType": "git"}, {"version": "a3134fb09e0b", "lessThan": "3565684309e5", "status": "affected", "versionType": "git"}, {"version": "a3134fb09e0b", "lessThan": "1143bfb9b055", "status": "affected", "versionType": "git"}, {"version": "a3134fb09e0b", "lessThan": "f1a1bc8775b2", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/soc/qcom/llcc-qcom.c"], "versions": [{"version": "4.19", "status": "affected"}, {"version": "0", "lessThan": "4.19", "status": "unaffected", "versionType": "semver"}, {"version": "5.4.261", "lessThanOrEqual": "5.4.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.201", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.139", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.63", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.5.12", "lessThanOrEqual": "6.5.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.2", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.7", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/cc1a1dcb411fe224f48553cfdcdfe6e61395b69c"}, {"url": "https://git.kernel.org/stable/c/5e5b85ea0f4bc484bfe4cc73ead51fa48d2366a0"}, {"url": "https://git.kernel.org/stable/c/995ee1e84e8db7fa5dcdde7dfe0bd7bb6f9bbb8c"}, {"url": "https://git.kernel.org/stable/c/f0ef883cae309bc5e8cdfcdbc1b4822732ce20a8"}, {"url": "https://git.kernel.org/stable/c/3565684309e54fa998ea27f37028d67cc3e1dff2"}, {"url": "https://git.kernel.org/stable/c/1143bfb9b055897975aeaea254da148e19524493"}, {"url": "https://git.kernel.org/stable/c/f1a1bc8775b26345aba2be278118999e7f661d3d"}], "title": "soc: qcom: llcc: Handle a second device without data corruption", "x_generator": {"engine": "bippy-9e1c9544281a"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-52871", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-05-21T18:17:57.620656Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T17:22:42.515Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T23:11:36.044Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/cc1a1dcb411fe224f48553cfdcdfe6e61395b69c", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/5e5b85ea0f4bc484bfe4cc73ead51fa48d2366a0", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/995ee1e84e8db7fa5dcdde7dfe0bd7bb6f9bbb8c", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/f0ef883cae309bc5e8cdfcdbc1b4822732ce20a8", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/3565684309e54fa998ea27f37028d67cc3e1dff2", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/1143bfb9b055897975aeaea254da148e19524493", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/f1a1bc8775b26345aba2be278118999e7f661d3d", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/cc1a1dcb411fe224f48553cfdcdfe6e61395b69c", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/5e5b85ea0f4bc484bfe4cc73ead51fa48d2366a0", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/995ee1e84e8db7fa5dcdde7dfe0bd7bb6f9bbb8c", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/f0ef883cae309bc5e8cdfcdbc1b4822732ce20a8", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/3565684309e54fa998ea27f37028d67cc3e1dff2", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/1143bfb9b055897975aeaea254da148e19524493", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/f1a1bc8775b26345aba2be278118999e7f661d3d", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T23:11:36.044Z"}}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-52871", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-05-21T18:17:57.620656Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-23T19:01:25.396Z"}, "title": "CISA ADP Vulnrichment"}], "cna": {"title": "soc: qcom: llcc: Handle a second device without data corruption", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "a3134fb09e0b", "lessThan": "cc1a1dcb411f", "versionType": "git"}, {"status": "affected", "version": "a3134fb09e0b", "lessThan": "5e5b85ea0f4b", "versionType": "git"}, {"status": "affected", "version": "a3134fb09e0b", "lessThan": "995ee1e84e8d", "versionType": "git"}, {"status": "affected", "version": "a3134fb09e0b", "lessThan": "f0ef883cae30", "versionType": "git"}, {"status": "affected", "version": "a3134fb09e0b", "lessThan": "3565684309e5", "versionType": "git"}, {"status": "affected", "version": "a3134fb09e0b", "lessThan": "1143bfb9b055", "versionType": "git"}, {"status": "affected", "version": "a3134fb09e0b", "lessThan": "f1a1bc8775b2", "versionType": "git"}], "programFiles": ["drivers/soc/qcom/llcc-qcom.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "4.19"}, {"status": "unaffected", "version": "0", "lessThan": "4.19", "versionType": "custom"}, {"status": "unaffected", "version": "5.4.261", "versionType": "custom", "lessThanOrEqual": "5.4.*"}, {"status": "unaffected", "version": "5.10.201", "versionType": "custom", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.139", "versionType": "custom", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.63", "versionType": "custom", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.5.12", "versionType": "custom", "lessThanOrEqual": "6.5.*"}, {"status": "unaffected", "version": "6.6.2", "versionType": "custom", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.7", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/soc/qcom/llcc-qcom.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/cc1a1dcb411fe224f48553cfdcdfe6e61395b69c"}, {"url": "https://git.kernel.org/stable/c/5e5b85ea0f4bc484bfe4cc73ead51fa48d2366a0"}, {"url": "https://git.kernel.org/stable/c/995ee1e84e8db7fa5dcdde7dfe0bd7bb6f9bbb8c"}, {"url": "https://git.kernel.org/stable/c/f0ef883cae309bc5e8cdfcdbc1b4822732ce20a8"}, {"url": "https://git.kernel.org/stable/c/3565684309e54fa998ea27f37028d67cc3e1dff2"}, {"url": "https://git.kernel.org/stable/c/1143bfb9b055897975aeaea254da148e19524493"}, {"url": "https://git.kernel.org/stable/c/f1a1bc8775b26345aba2be278118999e7f661d3d"}], "x_generator": {"engine": "bippy-a5840b7849dd"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nsoc: qcom: llcc: Handle a second device without data corruption\n\nUsually there is only one llcc device. But if there were a second, even\na failed probe call would modify the global drv_data pointer. So check\nif drv_data is valid before overwriting it."}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-05-29T05:18:48.825Z"}}}, "cveMetadata": {"cveId": "CVE-2023-52871", "state": "PUBLISHED", "dateUpdated": "2024-08-02T23:11:36.044Z", "dateReserved": "2024-05-21T15:19:24.263Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-05-21T15:32:00.922Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}