CVE-2023-52875 - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data Add the check for the return value of mtk_alloc_clk_data() in order to avoid NULL pointer dereference.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/001e5def774fa1a8f2b29567c0b0cd3e3a859a96
https://git.kernel.org/stable/c/0d6e24b422a2166a9297a8286ff2e6ab9a5e8cd3
https://git.kernel.org/stable/c/1953e62366da5460dc712e045f94fb0d8918999d
https://git.kernel.org/stable/c/1bf9c204aef4cc55ce46a7ff2d4dc7e5f86551a7
https://git.kernel.org/stable/c/2a18dd653284550900b02107c3c7b3ac5e0eb802
https://git.kernel.org/stable/c/6fccee2af400edaed9cf349d506c5971d4762739
https://git.kernel.org/stable/c/d1175cf4bd2b4c5f7c43f677ea1ce9ad2c18d055
https://git.kernel.org/stable/c/d1461f0c9ca0827c03730fe9652ebbf6316a2a95
https://git.kernel.org/stable/c/e61934720af4a58ffd43a63ffdd6f3a0bd7d7b47
https://lore.kernel.org/linux-cve-announce/2024052121-CVE-2023-52875-99fe@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2023-52875
https://www.cve.org/CVERecord?id=CVE-2023-52875

History

Wed, 11 Sep 2024 13:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-05-21T15:32:08.604Z

Updated: 2024-09-11T17:32:53.925Z

Reserved: 2024-05-21T15:19:24.264Z

Link: CVE-2023-52875

Vulnrichment

Updated: 2024-09-11T12:42:13.304Z

NVD

Status : Awaiting Analysis

Published: 2024-05-21T16:15:24.227

Modified: 2024-05-21T16:53:56.550

Link: CVE-2023-52875

Redhat

Severity : Low

Publid Date: 2024-05-21T00:00:00Z

Links: CVE-2023-52875 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-52875", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-05-21T15:19:24.264Z", "datePublished": "2024-05-21T15:32:08.604Z", "dateUpdated": "2024-09-11T17:32:53.925Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-05-29T05:18:52.944Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nclk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data\n\nAdd the check for the return value of mtk_alloc_clk_data() in order to\navoid NULL pointer dereference."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/clk/mediatek/clk-mt2701.c"], "versions": [{"version": "e9862118272a", "lessThan": "6fccee2af400", "status": "affected", "versionType": "git"}, {"version": "e9862118272a", "lessThan": "1953e62366da", "status": "affected", "versionType": "git"}, {"version": "e9862118272a", "lessThan": "d1461f0c9ca0", "status": "affected", "versionType": "git"}, {"version": "e9862118272a", "lessThan": "001e5def774f", "status": "affected", "versionType": "git"}, {"version": "e9862118272a", "lessThan": "d1175cf4bd2b", "status": "affected", "versionType": "git"}, {"version": "e9862118272a", "lessThan": "2a18dd653284", "status": "affected", "versionType": "git"}, {"version": "e9862118272a", "lessThan": "e61934720af4", "status": "affected", "versionType": "git"}, {"version": "e9862118272a", "lessThan": "1bf9c204aef4", "status": "affected", "versionType": "git"}, {"version": "e9862118272a", "lessThan": "0d6e24b422a2", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/clk/mediatek/clk-mt2701.c"], "versions": [{"version": "4.10", "status": "affected"}, {"version": "0", "lessThan": "4.10", "status": "unaffected", "versionType": "custom"}, {"version": "4.14.330", "lessThanOrEqual": "4.14.*", "status": "unaffected", "versionType": "custom"}, {"version": "4.19.299", "lessThanOrEqual": "4.19.*", "status": "unaffected", "versionType": "custom"}, {"version": "5.4.261", "lessThanOrEqual": "5.4.*", "status": "unaffected", "versionType": "custom"}, {"version": "5.10.201", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "custom"}, {"version": "5.15.139", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "custom"}, {"version": "6.1.63", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "custom"}, {"version": "6.5.12", "lessThanOrEqual": "6.5.*", "status": "unaffected", "versionType": "custom"}, {"version": "6.6.2", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "custom"}, {"version": "6.7", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/6fccee2af400edaed9cf349d506c5971d4762739"}, {"url": "https://git.kernel.org/stable/c/1953e62366da5460dc712e045f94fb0d8918999d"}, {"url": "https://git.kernel.org/stable/c/d1461f0c9ca0827c03730fe9652ebbf6316a2a95"}, {"url": "https://git.kernel.org/stable/c/001e5def774fa1a8f2b29567c0b0cd3e3a859a96"}, {"url": "https://git.kernel.org/stable/c/d1175cf4bd2b4c5f7c43f677ea1ce9ad2c18d055"}, {"url": "https://git.kernel.org/stable/c/2a18dd653284550900b02107c3c7b3ac5e0eb802"}, {"url": "https://git.kernel.org/stable/c/e61934720af4a58ffd43a63ffdd6f3a0bd7d7b47"}, {"url": "https://git.kernel.org/stable/c/1bf9c204aef4cc55ce46a7ff2d4dc7e5f86551a7"}, {"url": "https://git.kernel.org/stable/c/0d6e24b422a2166a9297a8286ff2e6ab9a5e8cd3"}], "title": "clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data", "x_generator": {"engine": "bippy-a5840b7849dd"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T23:11:36.057Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/6fccee2af400edaed9cf349d506c5971d4762739", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/1953e62366da5460dc712e045f94fb0d8918999d", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/d1461f0c9ca0827c03730fe9652ebbf6316a2a95", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/001e5def774fa1a8f2b29567c0b0cd3e3a859a96", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/d1175cf4bd2b4c5f7c43f677ea1ce9ad2c18d055", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/2a18dd653284550900b02107c3c7b3ac5e0eb802", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/e61934720af4a58ffd43a63ffdd6f3a0bd7d7b47", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/1bf9c204aef4cc55ce46a7ff2d4dc7e5f86551a7", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/0d6e24b422a2166a9297a8286ff2e6ab9a5e8cd3", "tags": ["x_transferred"]}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-52875", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-09-10T15:36:21.387443Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-11T17:32:53.925Z"}}]}}

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-52875", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-05-21T15:19:24.264Z", "datePublished": "2024-05-21T15:32:08.604Z", "dateUpdated": "2024-08-02T23:11:36.057Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-05-29T05:18:52.944Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nclk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data\n\nAdd the check for the return value of mtk_alloc_clk_data() in order to\navoid NULL pointer dereference."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/clk/mediatek/clk-mt2701.c"], "versions": [{"version": "e9862118272a", "lessThan": "6fccee2af400", "status": "affected", "versionType": "git"}, {"version": "e9862118272a", "lessThan": "1953e62366da", "status": "affected", "versionType": "git"}, {"version": "e9862118272a", "lessThan": "d1461f0c9ca0", "status": "affected", "versionType": "git"}, {"version": "e9862118272a", "lessThan": "001e5def774f", "status": "affected", "versionType": "git"}, {"version": "e9862118272a", "lessThan": "d1175cf4bd2b", "status": "affected", "versionType": "git"}, {"version": "e9862118272a", "lessThan": "2a18dd653284", "status": "affected", "versionType": "git"}, {"version": "e9862118272a", "lessThan": "e61934720af4", "status": "affected", "versionType": "git"}, {"version": "e9862118272a", "lessThan": "1bf9c204aef4", "status": "affected", "versionType": "git"}, {"version": "e9862118272a", "lessThan": "0d6e24b422a2", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/clk/mediatek/clk-mt2701.c"], "versions": [{"version": "4.10", "status": "affected"}, {"version": "0", "lessThan": "4.10", "status": "unaffected", "versionType": "custom"}, {"version": "4.14.330", "lessThanOrEqual": "4.14.*", "status": "unaffected", "versionType": "custom"}, {"version": "4.19.299", "lessThanOrEqual": "4.19.*", "status": "unaffected", "versionType": "custom"}, {"version": "5.4.261", "lessThanOrEqual": "5.4.*", "status": "unaffected", "versionType": "custom"}, {"version": "5.10.201", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "custom"}, {"version": "5.15.139", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "custom"}, {"version": "6.1.63", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "custom"}, {"version": "6.5.12", "lessThanOrEqual": "6.5.*", "status": "unaffected", "versionType": "custom"}, {"version": "6.6.2", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "custom"}, {"version": "6.7", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/6fccee2af400edaed9cf349d506c5971d4762739"}, {"url": "https://git.kernel.org/stable/c/1953e62366da5460dc712e045f94fb0d8918999d"}, {"url": "https://git.kernel.org/stable/c/d1461f0c9ca0827c03730fe9652ebbf6316a2a95"}, {"url": "https://git.kernel.org/stable/c/001e5def774fa1a8f2b29567c0b0cd3e3a859a96"}, {"url": "https://git.kernel.org/stable/c/d1175cf4bd2b4c5f7c43f677ea1ce9ad2c18d055"}, {"url": "https://git.kernel.org/stable/c/2a18dd653284550900b02107c3c7b3ac5e0eb802"}, {"url": "https://git.kernel.org/stable/c/e61934720af4a58ffd43a63ffdd6f3a0bd7d7b47"}, {"url": "https://git.kernel.org/stable/c/1bf9c204aef4cc55ce46a7ff2d4dc7e5f86551a7"}, {"url": "https://git.kernel.org/stable/c/0d6e24b422a2166a9297a8286ff2e6ab9a5e8cd3"}], "title": "clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data", "x_generator": {"engine": "bippy-a5840b7849dd"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-52875", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-09-10T15:36:21.387443Z"}}}], "providerMetadata": {"shortName": "CISA-ADP", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "dateUpdated": "2024-09-11T12:42:13.304Z"}, "title": "CISA ADP Vulnrichment"}]}}