CVE-2023-52754
published 2024-05-21CVE-2023-52754: In the Linux kernel, the following vulnerability has been resolved: media: imon: fix access to invalid resource for the second interface imon driver probes two…
PriorityP422medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.24%
15.3th percentile
In the Linux kernel, the following vulnerability has been resolved:
media: imon: fix access to invalid resource for the second interface
imon driver probes two USB interfaces, and at the probe of the second
interface, the driver assumes blindly that the first interface got
bound with the same imon driver. It's usually true, but it's still
possible that the first interface is bound with another driver via a
malformed descriptor. Then it may lead to a memory corruption, as
spotted by syzkaller; imon driver accesses the data from drvdata as
struct imon_context object although it's a completely different one
that was assigned by another driver.
This patch adds a sanity check -- whether the first interface is
really bound with the imon driver or not -- for avoiding the problem
above at the probe time.
Affected
17 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.64-1 (bookworm) | linux 6.1.64-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 21677cfc562a27e099719d413287bc8d1d24deb7 < 0f5068519f89d928d6c51100e4b274479123829f | 0f5068519f89d928d6c51100e4b274479123829f |
| linux | linux | >= 21677cfc562a27e099719d413287bc8d1d24deb7 < 5e0b788fb96be36d1baf1a5c88d09c7c82a0452a | 5e0b788fb96be36d1baf1a5c88d09c7c82a0452a |
| linux | linux | >= 21677cfc562a27e099719d413287bc8d1d24deb7 < b083aaf5db2eeca9e362723258e5d8698f7dd84e | b083aaf5db2eeca9e362723258e5d8698f7dd84e |
| linux | linux | >= 21677cfc562a27e099719d413287bc8d1d24deb7 < 10ec5a97f8f5a772a1a42b4eb27196b447cd3aa9 | 10ec5a97f8f5a772a1a42b4eb27196b447cd3aa9 |
| linux | linux | >= 21677cfc562a27e099719d413287bc8d1d24deb7 < 2a493a34bd6e496c55fabedd82b957193ace178f | 2a493a34bd6e496c55fabedd82b957193ace178f |
| linux | linux | >= 21677cfc562a27e099719d413287bc8d1d24deb7 < a1766a4fd83befa0b34d932d532e7ebb7fab1fa7 | a1766a4fd83befa0b34d932d532e7ebb7fab1fa7 |
| linux | linux_kernel | < 5.10.202 | 5.10.202 |
| linux | linux_kernel | >= 0 < 5.10.205-1 | 5.10.205-1 |
| linux | linux_kernel | >= 0 < 6.1.64-1 | 6.1.64-1 |
| linux | linux_kernel | >= 0 < 6.6.8-1 | 6.6.8-1 |
| linux | linux_kernel | >= 0 < 6.6.8-1 | 6.6.8-1 |
| linux | linux_kernel | >= 5.11 < 5.15.140 | 5.15.140 |
| linux | linux_kernel | >= 5.16 < 6.1.64 | 6.1.64 |
| linux | linux_kernel | >= 6.2 < 6.5.13 | 6.5.13 |
| linux | linux_kernel | >= 6.6 < 6.6.3 | 6.6.3 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: media: imon: fix access to invalid resource for the second interface
vendor_redhat·2024-05-21·CVSS 5.5
CVE-2023-52754 [MEDIUM] CWE-99 kernel: media: imon: fix access to invalid resource for the second interface
kernel: media: imon: fix access to invalid resource for the second interface
In the Linux kernel, the following vulnerability has been resolved:
media: imon: fix access to invalid resource for the second interface
imon driver probes two USB interfaces, and at the probe of the second
interface, the driver assumes blindly that the first interface got
bound with the same imon driver. It's usually true, but it's still
possible that the first interface is bound with another driver via a
malformed descriptor. Then it may lead to a memory corruption, as
spotted by syzkaller; imon driver accesses the data from drvdata as
struct imon_context object although it's a completely different one
that was assigned by another driver.
This patch adds a sanity check -- whether the first interface is
really b
Debian
CVE-2023-52754: linux - In the Linux kernel, the following vulnerability has been resolved: media: imon...
vendor_debian·2023·CVSS 5.5
CVE-2023-52754 [MEDIUM] CVE-2023-52754: linux - In the Linux kernel, the following vulnerability has been resolved: media: imon...
In the Linux kernel, the following vulnerability has been resolved: media: imon: fix access to invalid resource for the second interface imon driver probes two USB interfaces, and at the probe of the second interface, the driver assumes blindly that the first interface got bound with the same imon driver. It's usually true, but it's still possible that the first interface is bound with another driver via a malformed descriptor. Then it may lead to a memory corruption, as spotted by syzkaller; imon driver accesses the data from drvdata as struct imon_context object although it's a completely different one that was assigned by another driver. This patch adds a sanity check -- whether the first interface is really bound with the imon driver or not -- for avoiding the problem above at the prob
OSV
CVE-2023-52754: In the Linux kernel, the following vulnerability has been resolved: media: imon: fix access to invalid resource for the second interface imon driver p
osv·2024-05-21·CVSS 5.5
CVE-2023-52754 [MEDIUM] CVE-2023-52754: In the Linux kernel, the following vulnerability has been resolved: media: imon: fix access to invalid resource for the second interface imon driver p
In the Linux kernel, the following vulnerability has been resolved: media: imon: fix access to invalid resource for the second interface imon driver probes two USB interfaces, and at the probe of the second interface, the driver assumes blindly that the first interface got bound with the same imon driver. It's usually true, but it's still possible that the first interface is bound with another driver via a malformed descriptor. Then it may lead to a memory corruption, as spotted by syzkaller; imon driver accesses the data from drvdata as struct imon_context object although it's a completely different one that was assigned by another driver. This patch adds a sanity check -- whether the first interface is really bound with the imon driver or not -- for avoiding the problem above at the prob
GHSA
GHSA-2qm9-92xg-cr8h: In the Linux kernel, the following vulnerability has been resolved:
media: imon: fix access to invalid resource for the second interface
imon driver
ghsa_unreviewed·2024-05-21
CVE-2023-52754 [MEDIUM] CWE-401 GHSA-2qm9-92xg-cr8h: In the Linux kernel, the following vulnerability has been resolved:
media: imon: fix access to invalid resource for the second interface
imon driver
In the Linux kernel, the following vulnerability has been resolved:
media: imon: fix access to invalid resource for the second interface
imon driver probes two USB interfaces, and at the probe of the second
interface, the driver assumes blindly that the first interface got
bound with the same imon driver. It's usually true, but it's still
possible that the first interface is bound with another driver via a
malformed descriptor. Then it may lead to a memory corruption, as
spotted by syzkaller; imon driver accesses the data from drvdata as
struct imon_context object although it's a completely different one
that was assigned by another driver.
This patch adds a sanity check -- whether the first interface is
really bound with the imon driver or not -- for avoiding the problem
above at the p
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/0f5068519f89d928d6c51100e4b274479123829fhttps://git.kernel.org/stable/c/10ec5a97f8f5a772a1a42b4eb27196b447cd3aa9https://git.kernel.org/stable/c/2a493a34bd6e496c55fabedd82b957193ace178fhttps://git.kernel.org/stable/c/5e0b788fb96be36d1baf1a5c88d09c7c82a0452ahttps://git.kernel.org/stable/c/a1766a4fd83befa0b34d932d532e7ebb7fab1fa7https://git.kernel.org/stable/c/b083aaf5db2eeca9e362723258e5d8698f7dd84ehttps://git.kernel.org/stable/c/0f5068519f89d928d6c51100e4b274479123829fhttps://git.kernel.org/stable/c/10ec5a97f8f5a772a1a42b4eb27196b447cd3aa9https://git.kernel.org/stable/c/2a493a34bd6e496c55fabedd82b957193ace178fhttps://git.kernel.org/stable/c/5e0b788fb96be36d1baf1a5c88d09c7c82a0452ahttps://git.kernel.org/stable/c/a1766a4fd83befa0b34d932d532e7ebb7fab1fa7https://git.kernel.org/stable/c/b083aaf5db2eeca9e362723258e5d8698f7dd84e
2024-05-21
Published