CVE-2023-52841
published 2024-05-21CVE-2023-52841: In the Linux kernel, the following vulnerability has been resolved: media: vidtv: mux: Add check and kfree for kstrdup Add check for the return value of…
PriorityP418medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.24%
15.1th percentile
In the Linux kernel, the following vulnerability has been resolved:
media: vidtv: mux: Add check and kfree for kstrdup
Add check for the return value of kstrdup() and return the error
if it fails in order to avoid NULL pointer dereference.
Moreover, use kfree() in the later error handling in order to avoid
memory leak.
Affected
17 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.64-1 (bookworm) | linux 6.1.64-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= c2f78f0cb294aa6f009d3a170f4ee8ad199ba5da < 64863ba8e6b7651d994c6e6d506cc8aa2ac45edb | 64863ba8e6b7651d994c6e6d506cc8aa2ac45edb |
| linux | linux | >= c2f78f0cb294aa6f009d3a170f4ee8ad199ba5da < 980be4c3b0d51c0f873fd750117774561c66cf68 | 980be4c3b0d51c0f873fd750117774561c66cf68 |
| linux | linux | >= c2f78f0cb294aa6f009d3a170f4ee8ad199ba5da < a254ee1ddc592ae1efcce96b8c014e1bd2d5a2b4 | a254ee1ddc592ae1efcce96b8c014e1bd2d5a2b4 |
| linux | linux | >= c2f78f0cb294aa6f009d3a170f4ee8ad199ba5da < cb13001411999adb158b39e76d94705eb2da100d | cb13001411999adb158b39e76d94705eb2da100d |
| linux | linux | >= c2f78f0cb294aa6f009d3a170f4ee8ad199ba5da < aae7598aff291d4d140be1355aa20930af948785 | aae7598aff291d4d140be1355aa20930af948785 |
| linux | linux | >= c2f78f0cb294aa6f009d3a170f4ee8ad199ba5da < 1fd6eb12642e0c32692924ff359c07de4b781d78 | 1fd6eb12642e0c32692924ff359c07de4b781d78 |
| linux | linux_kernel | >= 0 < 5.10.205-1 | 5.10.205-1 |
| linux | linux_kernel | >= 0 < 6.1.64-1 | 6.1.64-1 |
| linux | linux_kernel | >= 0 < 6.6.8-1 | 6.6.8-1 |
| linux | linux_kernel | >= 0 < 6.6.8-1 | 6.6.8-1 |
| linux | linux_kernel | >= 5.10 < 5.10.201 | 5.10.201 |
| linux | linux_kernel | >= 5.11 < 5.15.139 | 5.15.139 |
| linux | linux_kernel | >= 5.16 < 6.1.63 | 6.1.63 |
| linux | linux_kernel | >= 6.2 < 6.5.12 | 6.5.12 |
| linux | linux_kernel | >= 6.6 < 6.6.2 | 6.6.2 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-7hxp-v79h-r4fw: In the Linux kernel, the following vulnerability has been resolved:
media: vidtv: mux: Add check and kfree for kstrdup
Add check for the return valu
ghsa_unreviewed·2024-05-21
CVE-2023-52841 [MEDIUM] CWE-401 GHSA-7hxp-v79h-r4fw: In the Linux kernel, the following vulnerability has been resolved:
media: vidtv: mux: Add check and kfree for kstrdup
Add check for the return valu
In the Linux kernel, the following vulnerability has been resolved:
media: vidtv: mux: Add check and kfree for kstrdup
Add check for the return value of kstrdup() and return the error
if it fails in order to avoid NULL pointer dereference.
Moreover, use kfree() in the later error handling in order to avoid
memory leak.
OSV
CVE-2023-52841: In the Linux kernel, the following vulnerability has been resolved: media: vidtv: mux: Add check and kfree for kstrdup Add check for the return value
osv·2024-05-21·CVSS 5.5
CVE-2023-52841 [MEDIUM] CVE-2023-52841: In the Linux kernel, the following vulnerability has been resolved: media: vidtv: mux: Add check and kfree for kstrdup Add check for the return value
In the Linux kernel, the following vulnerability has been resolved: media: vidtv: mux: Add check and kfree for kstrdup Add check for the return value of kstrdup() and return the error if it fails in order to avoid NULL pointer dereference. Moreover, use kfree() in the later error handling in order to avoid memory leak.
Red Hat
kernel: media: vidtv: mux: Add check and kfree for kstrdup
vendor_redhat·2024-05-21·CVSS 5.5
CVE-2023-52841 [MEDIUM] CWE-476 kernel: media: vidtv: mux: Add check and kfree for kstrdup
kernel: media: vidtv: mux: Add check and kfree for kstrdup
In the Linux kernel, the following vulnerability has been resolved:
media: vidtv: mux: Add check and kfree for kstrdup
Add check for the return value of kstrdup() and return the error
if it fails in order to avoid NULL pointer dereference.
Moreover, use kfree() in the later error handling in order to avoid
memory leak.
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (Red Hat Enterprise Linux 8) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 8) - Not affected
Package: kernel (Red Hat Enterprise Linux 9) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 9
Debian
CVE-2023-52841: linux - In the Linux kernel, the following vulnerability has been resolved: media: vidt...
vendor_debian·2023·CVSS 5.5
CVE-2023-52841 [MEDIUM] CVE-2023-52841: linux - In the Linux kernel, the following vulnerability has been resolved: media: vidt...
In the Linux kernel, the following vulnerability has been resolved: media: vidtv: mux: Add check and kfree for kstrdup Add check for the return value of kstrdup() and return the error if it fails in order to avoid NULL pointer dereference. Moreover, use kfree() in the later error handling in order to avoid memory leak.
Scope: local
bookworm: resolved (fixed in 6.1.64-1)
bullseye: resolved (fixed in 5.10.205-1)
forky: resolved (fixed in 6.6.8-1)
sid: resolved (fixed in 6.6.8-1)
trixie: resolved (fixed in 6.6.8-1)
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/1fd6eb12642e0c32692924ff359c07de4b781d78https://git.kernel.org/stable/c/64863ba8e6b7651d994c6e6d506cc8aa2ac45edbhttps://git.kernel.org/stable/c/980be4c3b0d51c0f873fd750117774561c66cf68https://git.kernel.org/stable/c/a254ee1ddc592ae1efcce96b8c014e1bd2d5a2b4https://git.kernel.org/stable/c/aae7598aff291d4d140be1355aa20930af948785https://git.kernel.org/stable/c/cb13001411999adb158b39e76d94705eb2da100dhttps://git.kernel.org/stable/c/1fd6eb12642e0c32692924ff359c07de4b781d78https://git.kernel.org/stable/c/64863ba8e6b7651d994c6e6d506cc8aa2ac45edbhttps://git.kernel.org/stable/c/980be4c3b0d51c0f873fd750117774561c66cf68https://git.kernel.org/stable/c/a254ee1ddc592ae1efcce96b8c014e1bd2d5a2b4https://git.kernel.org/stable/c/aae7598aff291d4d140be1355aa20930af948785https://git.kernel.org/stable/c/cb13001411999adb158b39e76d94705eb2da100d
2024-05-21
Published