cbcvebase.
CVE-2023-52850
published 2024-05-21

CVE-2023-52850: In the Linux kernel, the following vulnerability has been resolved: media: hantro: Check whether reset op is defined before use The i.MX8MM/N/P does not define…

PriorityP418medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.24%
14.5th percentile
In the Linux kernel, the following vulnerability has been resolved: media: hantro: Check whether reset op is defined before use The i.MX8MM/N/P does not define the .reset op since reset of the VPU is done by genpd. Check whether the .reset op is defined before calling it to avoid NULL pointer dereference. Note that the Fixes tag is set to the commit which removed the reset op from i.MX8M Hantro G2 implementation, this is because before this commit all the implementations did define the .reset op.

Affected

12 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 6.1.64-1 (bookworm)linux 6.1.64-1 (bookworm)
linuxlinux
linuxlinux>= 6971efb70ac3e43d19bf33ef5f83bea0271831ee < 64f55cebb4339ae771e9e7f3f42bee2489e2fa0064f55cebb4339ae771e9e7f3f42bee2489e2fa00
linuxlinux>= 6971efb70ac3e43d19bf33ef5f83bea0271831ee < 66b4c5f980d741f3a47e4b65eeaf2797f2d5929466b4c5f980d741f3a47e4b65eeaf2797f2d59294
linuxlinux>= 6971efb70ac3e43d19bf33ef5f83bea0271831ee < 24c06295f28335ced3aad53dd4b0a0bae7b9b10024c06295f28335ced3aad53dd4b0a0bae7b9b100
linuxlinux>= 6971efb70ac3e43d19bf33ef5f83bea0271831ee < 88d4b23a629ebd34f682f770cb6c2116c851f7b888d4b23a629ebd34f682f770cb6c2116c851f7b8
linuxlinux_kernel>= 0 < 6.1.64-16.1.64-1
linuxlinux_kernel>= 0 < 6.6.8-16.6.8-1
linuxlinux_kernel>= 0 < 6.6.8-16.6.8-1
linuxlinux_kernel>= 5.18 < 6.1.636.1.63
linuxlinux_kernel>= 6.2 < 6.5.126.5.12
linuxlinux_kernel>= 6.6 < 6.6.26.6.2

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.