CVE-2023-52875
clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
CISA's decision points: whether it is exploited, whether attacks can be automated, and how much control an attacker gets. Assessed (SSVC 2.0.3).What do these mean? →
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data Add the check for the return value of mtk_alloc_clk_data() in order to avoid NULL pointer dereference.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- Linux Linux
Version range not reported
- Linux Linux
4.10
References 9
git.kernel.org
- stable/c/6fccee2af400edaed9cf349d506c5971d4762739
- stable/c/1953e62366da5460dc712e045f94fb0d8918999d
- stable/c/d1461f0c9ca0827c03730fe9652ebbf6316a2a95
- stable/c/001e5def774fa1a8f2b29567c0b0cd3e3a859a96
- stable/c/d1175cf4bd2b4c5f7c43f677ea1ce9ad2c18d055
- stable/c/2a18dd653284550900b02107c3c7b3ac5e0eb802
- stable/c/e61934720af4a58ffd43a63ffdd6f3a0bd7d7b47
- stable/c/1bf9c204aef4cc55ce46a7ff2d4dc7e5f86551a7
- stable/c/0d6e24b422a2166a9297a8286ff2e6ab9a5e8cd3