CVE-2023-52918
media: pci: cx23885: check cx23885_vdev_init() return
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
CISA's decision points: whether it is exploited, whether attacks can be automated, and how much control an attacker gets. Assessed (SSVC 2.0.3).What do these mean? →
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
In the Linux kernel, the following vulnerability has been resolved: media: pci: cx23885: check cx23885_vdev_init() return cx23885_vdev_init() can return a NULL pointer, but that pointer is used in the next line without a check. Add a NULL pointer check and go to the error unwind if it is NULL.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- Linux Linux
Version range not reported
- Linux Linux
2.6.25
References 7
git.kernel.org
- stable/c/8e31b096e2e1949bc8f0be019c9ae70d414404c6
- stable/c/199a42fc4c45e8b7f19efeb15dbc36889a599ac2
- stable/c/e7385510e2550a9f8b6f3d5f33c5b894ab9ba976
- stable/c/a5f1d30c51c485cec7a7de60205667c3ff86c303
- stable/c/06ee04a907d64ee3910fecedd05d7f1be4b1b70e
- stable/c/b1397fb4a779fca560c43d2acf6702d41b4a495b
- stable/c/15126b916e39b0cb67026b0af3c014bfeb1f76b3