CVE-2023-52789

Summary

In the Linux kernel, the following vulnerability has been resolved:

tty: vcc: Add check for kstrdup() in vcc_probe()

Add check for the return value of kstrdup() and return the error, if it fails in order to avoid NULL pointer dereference.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux5d171050e28f823aeb040f2830da4d3422b54b63 < 38cd56fc9de78bf3c878790785e8c231116ef9d3affected
LinuxLinux5d171050e28f823aeb040f2830da4d3422b54b63 < 909963e0c16778cec28efb1affc21558825f4200affected
LinuxLinux5d171050e28f823aeb040f2830da4d3422b54b63 < 460284dfb10b207980c6f3f7046e33446ceb38acaffected
LinuxLinux5d171050e28f823aeb040f2830da4d3422b54b63 < 4ef41a7f33ffe1a335e7db7e1564ddc6afad47ccaffected
LinuxLinux5d171050e28f823aeb040f2830da4d3422b54b63 < 6c80f48912b5bd4965352d1a9a989e21743a4a06affected
LinuxLinux5d171050e28f823aeb040f2830da4d3422b54b63 < 7cebc86481bf16049e266f6774d90f2fd4f8d5d2affected
LinuxLinux5d171050e28f823aeb040f2830da4d3422b54b63 < 4a24a31826246b15477399febd13292b0c9f0ee9affected
LinuxLinux5d171050e28f823aeb040f2830da4d3422b54b63 < 8f8771757b130383732195497e47fba2aba76d3aaffected
LinuxLinux5d171050e28f823aeb040f2830da4d3422b54b63 < d81ffb87aaa75f842cd7aa57091810353755b3e6affected
LinuxLinux4.14affected
LinuxLinux0 < 4.14unaffected
LinuxLinux4.14.331 <= 4.14.*unaffected
LinuxLinux4.19.300 <= 4.19.*unaffected
LinuxLinux5.4.262 <= 5.4.*unaffected
LinuxLinux5.10.202 <= 5.10.*unaffected
LinuxLinux5.15.140 <= 5.15.*unaffected
LinuxLinux6.1.64 <= 6.1.*unaffected
LinuxLinux6.5.13 <= 6.5.*unaffected
LinuxLinux6.6.3 <= 6.6.*unaffected
LinuxLinux6.7 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References