CVE-2023-52918

Published: Oct 22, 2024Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: media: pci: cx23885: check cx23885_vdev_init() return cx23885_vdev_init() can return a NULL pointer, but that pointer is used in the next line without a check. Add a NULL pointer check and go to the error unwind if it is NULL.

Affected (6)

Products: Linux: Linux Kernel

1 product

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	version < 4.19.321
Linux Linux Kernel	4.20 ≤ version < 5.4.283
Linux Linux Kernel	5.11 ≤ version < 5.15.166
Linux Linux Kernel	5.16 ≤ version < 6.1.107
Linux Linux Kernel	5.5 ≤ version < 5.10.225
Linux Linux Kernel	6.2 ≤ version < 6.6.48

Related CWEs

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

References (8)

https://git.kernel.org/stable/c/06ee04a907d64ee3910fecedd05d7f1be4b1b70e

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/15126b916e39b0cb67026b0af3c014bfeb1f76b3

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/199a42fc4c45e8b7f19efeb15dbc36889a599ac2

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/8e31b096e2e1949bc8f0be019c9ae70d414404c6

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/a5f1d30c51c485cec7a7de60205667c3ff86c303

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/b1397fb4a779fca560c43d2acf6702d41b4a495b

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/e7385510e2550a9f8b6f3d5f33c5b894ab9ba976

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.