In the Linux kernel, the following vulnerability has been resolved: media: pci: cx23885: check cx23885_vdev_init() return cx23885_vdev_init() can return a NULL pointer, but that pointer is used in the next line without a check. Add a NULL pointer check and go to the error unwind if it is NULL.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

No data.

References
Link Providers
https://git.kernel.org/stable/c/06ee04a907d64ee3910fecedd05d7f1be4b1b70e cve-icon cve-icon
https://git.kernel.org/stable/c/15126b916e39b0cb67026b0af3c014bfeb1f76b3 cve-icon cve-icon
https://git.kernel.org/stable/c/199a42fc4c45e8b7f19efeb15dbc36889a599ac2 cve-icon cve-icon
https://git.kernel.org/stable/c/8e31b096e2e1949bc8f0be019c9ae70d414404c6 cve-icon cve-icon
https://git.kernel.org/stable/c/a5f1d30c51c485cec7a7de60205667c3ff86c303 cve-icon cve-icon
https://git.kernel.org/stable/c/b1397fb4a779fca560c43d2acf6702d41b4a495b cve-icon cve-icon
https://git.kernel.org/stable/c/e7385510e2550a9f8b6f3d5f33c5b894ab9ba976 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024102230-CVE-2023-52918-cf21@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2023-52918 cve-icon
https://www.cve.org/CVERecord?id=CVE-2023-52918 cve-icon
History

Thu, 24 Oct 2024 04:15:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses CWE-476
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel

Wed, 23 Oct 2024 01:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Tue, 22 Oct 2024 13:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 22 Oct 2024 07:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: media: pci: cx23885: check cx23885_vdev_init() return cx23885_vdev_init() can return a NULL pointer, but that pointer is used in the next line without a check. Add a NULL pointer check and go to the error unwind if it is NULL.
Title media: pci: cx23885: check cx23885_vdev_init() return
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-10-22T07:37:27.390Z

Updated: 2024-11-04T14:55:12.355Z

Reserved: 2024-08-21T06:07:11.017Z

Link: CVE-2023-52918

cve-icon Vulnrichment

Updated: 2024-10-22T13:10:54.453Z

cve-icon NVD

Status : Analyzed

Published: 2024-10-22T08:15:02.277

Modified: 2024-10-24T03:55:26.737

Link: CVE-2023-52918

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-10-22T00:00:00Z

Links: CVE-2023-52918 - Bugzilla