cbcvebase.
CVE-2023-52764
published 2024-05-21

CVE-2023-52764: In the Linux kernel, the following vulnerability has been resolved: media: gspca: cpia1: shift-out-of-bounds in set_flicker Syzkaller reported the following…

PriorityP337high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.26%
17.1th percentile
In the Linux kernel, the following vulnerability has been resolved: media: gspca: cpia1: shift-out-of-bounds in set_flicker Syzkaller reported the following issue: UBSAN: shift-out-of-bounds in drivers/media/usb/gspca/cpia1.c:1031:27 shift exponent 245 is too large for 32-bit type 'int' When the value of the variable "sd->params.exposure.gain" exceeds the number of bits in an integer, a shift-out-of-bounds error is reported. It is triggered because the variable "currentexp" cannot be left-shifted by more than the number of bits in an integer. In order to avoid invalid range during left-shift, the conditional expression is added.

Affected

23 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 6.1.64-1 (bookworm)linux 6.1.64-1 (bookworm)
linuxlinux
linuxlinux>= 54e8bc5d64a651e2fb8b2366637e6a7d920a4c70 < 69bba62600bd91d6b7c1e8ca181faf8ac64f706069bba62600bd91d6b7c1e8ca181faf8ac64f7060
linuxlinux>= 54e8bc5d64a651e2fb8b2366637e6a7d920a4c70 < 2eee8edfff90e22980a6b22079d238c3c9d323bb2eee8edfff90e22980a6b22079d238c3c9d323bb
linuxlinux>= 54e8bc5d64a651e2fb8b2366637e6a7d920a4c70 < 8f83c85ee88225319c52680792320c02158c2a9b8f83c85ee88225319c52680792320c02158c2a9b
linuxlinux>= 54e8bc5d64a651e2fb8b2366637e6a7d920a4c70 < c6b6b8692218da73b33b310d7c1df90f115bdd9ac6b6b8692218da73b33b310d7c1df90f115bdd9a
linuxlinux>= 54e8bc5d64a651e2fb8b2366637e6a7d920a4c70 < 09cd8b561aa9796903710a1046957f2b112c8f2609cd8b561aa9796903710a1046957f2b112c8f26
linuxlinux>= 54e8bc5d64a651e2fb8b2366637e6a7d920a4c70 < a647f27a7426d2fe1b40da7c8fa2b81354a51177a647f27a7426d2fe1b40da7c8fa2b81354a51177
linuxlinux>= 54e8bc5d64a651e2fb8b2366637e6a7d920a4c70 < 93bddd6529f187f510eec759f37d0569243c980993bddd6529f187f510eec759f37d0569243c9809
linuxlinux>= 54e8bc5d64a651e2fb8b2366637e6a7d920a4c70 < e2d7149b913d14352c82624e723ce1c211ca06d3e2d7149b913d14352c82624e723ce1c211ca06d3
linuxlinux>= 54e8bc5d64a651e2fb8b2366637e6a7d920a4c70 < 099be1822d1f095433f4b08af9cc9d6308ec1953099be1822d1f095433f4b08af9cc9d6308ec1953
linuxlinux_kernel< 4.14.3314.14.331
linuxlinux_kernel>= 0 < 5.10.205-15.10.205-1
linuxlinux_kernel>= 0 < 6.1.64-16.1.64-1
linuxlinux_kernel>= 0 < 6.6.8-16.6.8-1
linuxlinux_kernel>= 0 < 6.6.8-16.6.8-1
linuxlinux_kernel>= 4.15 < 4.19.3004.19.300
linuxlinux_kernel>= 4.20 < 5.4.2625.4.262
linuxlinux_kernel>= 5.11 < 5.15.1405.15.140
linuxlinux_kernel>= 5.16 < 6.1.646.1.64
linuxlinux_kernel>= 5.5 < 5.10.2025.10.202
linuxlinux_kernel>= 6.2 < 6.5.136.5.13
linuxlinux_kernel>= 6.6 < 6.6.36.6.3

CVSS provenance

nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_debian7.8HIGH
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.