CVE-2023-52844

In the Linux kernel, the following vulnerability has been resolved: media: vidtv: psi: Add check for kstrdup Add check for the return value of kstrdup() and return the error if it fails in order to avoid NULL pointer dereference.

CVSS v3 6.2 MEDIUM

6.2^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.5 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://git.kernel.org/stable/c/3387490c89b10aeb4e71d78b65dbc9ba4b2385b9
https://git.kernel.org/stable/c/5c26aae3723965c291c65dd2ecad6a3240d422b0
https://git.kernel.org/stable/c/5cfcc8de7d733a1137b86954cc28ce99972311ad
https://git.kernel.org/stable/c/76a2c5df6ca8bd8ada45e953b8c72b746f42918d
https://git.kernel.org/stable/c/a51335704a3f90eaf23a6864faefca34b382490a
https://git.kernel.org/stable/c/d17269fb9161995303985ab2fe6f16cfb72152f9
https://git.kernel.org/stable/c/3387490c89b10aeb4e71d78b65dbc9ba4b2385b9
https://git.kernel.org/stable/c/5c26aae3723965c291c65dd2ecad6a3240d422b0
https://git.kernel.org/stable/c/5cfcc8de7d733a1137b86954cc28ce99972311ad
https://git.kernel.org/stable/c/76a2c5df6ca8bd8ada45e953b8c72b746f42918d
https://git.kernel.org/stable/c/a51335704a3f90eaf23a6864faefca34b382490a
https://git.kernel.org/stable/c/d17269fb9161995303985ab2fe6f16cfb72152f9

Configurations

No configuration.

History

21 Nov 2024, 08:40

Type	Values Removed	Values Added
References	~~() https://git.kernel.org/stable/c/3387490c89b10aeb4e71d78b65dbc9ba4b2385b9 -~~	() https://git.kernel.org/stable/c/3387490c89b10aeb4e71d78b65dbc9ba4b2385b9 -
References	~~() https://git.kernel.org/stable/c/5c26aae3723965c291c65dd2ecad6a3240d422b0 -~~	() https://git.kernel.org/stable/c/5c26aae3723965c291c65dd2ecad6a3240d422b0 -
References	~~() https://git.kernel.org/stable/c/5cfcc8de7d733a1137b86954cc28ce99972311ad -~~	() https://git.kernel.org/stable/c/5cfcc8de7d733a1137b86954cc28ce99972311ad -
References	~~() https://git.kernel.org/stable/c/76a2c5df6ca8bd8ada45e953b8c72b746f42918d -~~	() https://git.kernel.org/stable/c/76a2c5df6ca8bd8ada45e953b8c72b746f42918d -
References	~~() https://git.kernel.org/stable/c/a51335704a3f90eaf23a6864faefca34b382490a -~~	() https://git.kernel.org/stable/c/a51335704a3f90eaf23a6864faefca34b382490a -
References	~~() https://git.kernel.org/stable/c/d17269fb9161995303985ab2fe6f16cfb72152f9 -~~	() https://git.kernel.org/stable/c/d17269fb9161995303985ab2fe6f16cfb72152f9 -

03 Jul 2024, 01:44

Type	Values Removed	Values Added
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 6.2
CWE		CWE-476
Summary		(es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: media: vidtv: psi: Agregar verificación para kstrdup. Agregue verificación para el valor de retorno de kstrdup() y devuelva el error si falla para evitar la desreferencia al puntero NULL.

21 May 2024, 16:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-05-21 16:15

Updated : 2024-11-21 08:40

NVD link : CVE-2023-52844

Mitre link : CVE-2023-52844

CVE.ORG link : CVE-2023-52844

JSON object : View

Products Affected

No product.

CWE

CWE-476

NULL Pointer Dereference

6.2 /10