cbcvebase.
CVE-2023-52870
published 2024-05-21

CVE-2023-52870: In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data Add the check for the return…

PriorityP411medium4.1CVSS 3.1
AVLACHPRHUINSUCNINAH
EPSS
0.22%
12.4th percentile
In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data Add the check for the return value of mtk_alloc_clk_data() in order to avoid NULL pointer dereference.

Affected

17 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 6.1.64-1 (bookworm)linux 6.1.64-1 (bookworm)
linuxlinux
linuxlinux>= 1aca9939bf72893887cb7e3455e44c864bada2f9 < 2617aa8ceaf30e41d3eb7f5fef3445542bef193a2617aa8ceaf30e41d3eb7f5fef3445542bef193a
linuxlinux>= 1aca9939bf72893887cb7e3455e44c864bada2f9 < 533ca5153ad6c7b7d47ae0114b14d0333964b946533ca5153ad6c7b7d47ae0114b14d0333964b946
linuxlinux>= 1aca9939bf72893887cb7e3455e44c864bada2f9 < dd1f30d68fa98eb672c0a259297b761656a9025fdd1f30d68fa98eb672c0a259297b761656a9025f
linuxlinux>= 1aca9939bf72893887cb7e3455e44c864bada2f9 < 10cc81124407d862f0f747db4baa9c006510b48010cc81124407d862f0f747db4baa9c006510b480
linuxlinux>= 1aca9939bf72893887cb7e3455e44c864bada2f9 < b5ff3e89b4e7f46ad2aa0de7e08d18e6f87d71bcb5ff3e89b4e7f46ad2aa0de7e08d18e6f87d71bc
linuxlinux>= 1aca9939bf72893887cb7e3455e44c864bada2f9 < b82681042724924ae3ba0f2f2eeec217fa31e830b82681042724924ae3ba0f2f2eeec217fa31e830
linuxlinux_kernel>= 0 < 5.10.205-15.10.205-1
linuxlinux_kernel>= 0 < 6.1.64-16.1.64-1
linuxlinux_kernel>= 0 < 6.6.8-16.6.8-1
linuxlinux_kernel>= 0 < 6.6.8-16.6.8-1
linuxlinux_kernel>= 5.11 < 5.15.1395.15.139
linuxlinux_kernel>= 5.16 < 6.1.636.1.63
linuxlinux_kernel>= 5.8 < 5.10.2015.10.201
linuxlinux_kernel>= 6.2 < 6.5.126.5.12
linuxlinux_kernel>= 6.6 < 6.6.26.6.2

CVSS provenance

nvdv3.14.1MEDIUMCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H
osv4.1MEDIUM
vendor_debian4.1MEDIUM
vendor_redhat4.1MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.