CVE-2023-52459

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-52459
In the Linux kernel, the following vulnerability has been resolved: media: v4l: async: Fix duplicated list deletion The list deletion call dropped here is already called from the helper function in the line before. Having a second list_del() call results in either a warning (with CONFIG_DEBUG_LIST=y): list_del corruption, c46c8198->next is LIST_POISON1 (00000100) If CONFIG_DEBUG_LIST is disabled the operation results in a kernel error due to NULL pointer dereference.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/3de6ee94aae701fa949cd3b5df6b6a440ddfb8f2 Patch
https://git.kernel.org/stable/c/49d82811428469566667f22749610b8c132cdb3e Patch
https://git.kernel.org/stable/c/b7062628caeaec90e8f691ebab2d70f31b7b6b91 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

19 Apr 2024, 18:49

Type Values Removed Values Added
First Time Linux linux Kernel
Linux
References () https://git.kernel.org/stable/c/3de6ee94aae701fa949cd3b5df6b6a440ddfb8f2 - () https://git.kernel.org/stable/c/3de6ee94aae701fa949cd3b5df6b6a440ddfb8f2 - Patch
References () https://git.kernel.org/stable/c/49d82811428469566667f22749610b8c132cdb3e - () https://git.kernel.org/stable/c/49d82811428469566667f22749610b8c132cdb3e - Patch
References () https://git.kernel.org/stable/c/b7062628caeaec90e8f691ebab2d70f31b7b6b91 - () https://git.kernel.org/stable/c/b7062628caeaec90e8f691ebab2d70f31b7b6b91 - Patch
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: medios: v4l: async: corregir eliminación de lista duplicada La llamada de eliminación de lista descartada aquí ya se llama desde la función auxiliar en la línea anterior. Tener una segunda llamada a list_del() da como resultado una advertencia (con CONFIG_DEBUG_LIST=y): corrupción de list_del, c46c8198->el siguiente es LIST_POISON1 (00000100). Si CONFIG_DEBUG_LIST está deshabilitado, la operación genera un error del kernel debido a la desreferencia del puntero NULL.
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE CWE-476

23 Feb 2024, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-02-23 15:15

Updated : 2024-04-19 18:49

NVD link : CVE-2023-52459

Mitre link : CVE-2023-52459

CVE.ORG link : CVE-2023-52459

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference