cbcvebase.
CVE-2023-52858
published 2024-05-21

CVE-2023-52858: In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data Add the check for the return…

PriorityP419medium6.2CVSS 3.1
AVLACLPRNUINSUCNINAH
EPSS
0.25%
16.6th percentile
In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data Add the check for the return value of mtk_alloc_clk_data() in order to avoid NULL pointer dereference.

Affected

19 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 6.1.64-1 (bookworm)linux 6.1.64-1 (bookworm)
linuxlinux
linuxlinux>= 3b5e748615e714711220b2a95d19bd25a037db09 < e8ae4b49dd9cfde69d8de8c0c0cd7cf1b004482ee8ae4b49dd9cfde69d8de8c0c0cd7cf1b004482e
linuxlinux>= 3b5e748615e714711220b2a95d19bd25a037db09 < 4f861b63945e076f9f003a5fad958174096df1ee4f861b63945e076f9f003a5fad958174096df1ee
linuxlinux>= 3b5e748615e714711220b2a95d19bd25a037db09 < e964d21dc034b650d719c4ea39564bec72b42f94e964d21dc034b650d719c4ea39564bec72b42f94
linuxlinux>= 3b5e748615e714711220b2a95d19bd25a037db09 < a836efc21ef04608333d6d05753e558ebd1f85d0a836efc21ef04608333d6d05753e558ebd1f85d0
linuxlinux>= 3b5e748615e714711220b2a95d19bd25a037db09 < 1d89430fc3158f872d492f1b88d07262f48290c01d89430fc3158f872d492f1b88d07262f48290c0
linuxlinux>= 3b5e748615e714711220b2a95d19bd25a037db09 < 5fbea47eebff5daeca7d918c99289bcd3ae4dc8d5fbea47eebff5daeca7d918c99289bcd3ae4dc8d
linuxlinux>= 3b5e748615e714711220b2a95d19bd25a037db09 < 2befa515c1bb6cdd33c262b909d93d1973a219aa2befa515c1bb6cdd33c262b909d93d1973a219aa
linuxlinux_kernel>= 0 < 5.10.205-15.10.205-1
linuxlinux_kernel>= 0 < 6.1.64-16.1.64-1
linuxlinux_kernel>= 0 < 6.6.8-16.6.8-1
linuxlinux_kernel>= 0 < 6.6.8-16.6.8-1
linuxlinux_kernel>= 5.0 < 5.4.2615.4.261
linuxlinux_kernel>= 5.11 < 5.15.1395.15.139
linuxlinux_kernel>= 5.16 < 6.1.636.1.63
linuxlinux_kernel>= 5.5 < 5.10.2015.10.201
linuxlinux_kernel>= 6.2 < 6.5.126.5.12
linuxlinux_kernel>= 6.6 < 6.6.26.6.2

CVSS provenance

nvdv3.16.2MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
osv6.2MEDIUM
vendor_debian6.2MEDIUM
vendor_redhat6.2MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.