CVE-2023-52647 — NULL Pointer Dereference in Linux

CWE-476 — NULL Pointer Dereference17 documents8 sources
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 87.69%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
7
LinuxLinux KernelDebian Linux+4 more
Timeline
PublishedMay 1
Latest updateJul 4

Description

In the Linux kernel, the following vulnerability has been resolved: media: nxp: imx8-isi: Check whether crossbar pad is non-NULL before access When translating source to sink streams in the crossbar subdev, the driver tries to locate the remote subdev connected to the sink pad. The remote pad may be NULL, if userspace tries to enable a stream that ends at an unconnected crossbar sink. When that occurs, the driver dereferences the NULL pad, leading to a crash. Prevent the crash by checking if …

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages9 packages

▶NVDlinux/linux_kernel6.4 — 6.6.24+2
▶Debianlinux/linux_kernel< 6.7.12-1+1
▶Ubuntulinux/linux_kernel< 6.8.0-35.35
▶CVEListV5linux/linuxcf21f328fcafacf4f96e7a30ef9dceede1076378 — c95318607fbe8fdd44991a8dad2e44118e6b8812+4
▶debiandebian/linux< linux 6.7.12-1 (forky)

Patches

Patch: git.kernel.org ↗Patch: git.kernel.org ↗Patch: git.kernel.org ↗

🔴Vulnerability Details

7
OSV
linux-oracle vulnerabilities↗2024-07-04
▶
OSV
linux-azure, linux-gke vulnerabilities↗2024-06-14
▶
OSV
linux-oem-6.8 vulnerabilities↗2024-06-11
▶
OSV
linux, linux-ibm, linux-lowlatency, linux-raspi vulnerabilities↗2024-06-07
▶
OSV
linux-aws, linux-gcp vulnerabilities↗2024-06-07
▶

📋Vendor Advisories

8
Ubuntu
Linux kernel (Oracle) vulnerabilities↗2024-07-04
▶
Ubuntu
Linux kernel vulnerabilities↗2024-06-14
▶
Ubuntu
Linux kernel (OEM) vulnerabilities↗2024-06-11
▶
Ubuntu
Linux kernel vulnerabilities↗2024-06-07
▶
Ubuntu
Linux kernel vulnerabilities↗2024-06-07
▶

💬Community

1
Bugzilla
CVE-2023-52647 kernel: media: nxp: imx8-isi: Check whether crossbar pad is non-NULL before access↗2024-05-01
▶