CVE-2023-52844

Summary

In the Linux kernel, the following vulnerability has been resolved:

media: vidtv: psi: Add check for kstrdup

Add check for the return value of kstrdup() and return the error if it fails in order to avoid NULL pointer dereference.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxf90cf6079bf67988f8b1ad1ade70fc89d0080905 < 3387490c89b10aeb4e71d78b65dbc9ba4b2385b9affected
LinuxLinuxf90cf6079bf67988f8b1ad1ade70fc89d0080905 < d17269fb9161995303985ab2fe6f16cfb72152f9affected
LinuxLinuxf90cf6079bf67988f8b1ad1ade70fc89d0080905 < 5c26aae3723965c291c65dd2ecad6a3240d422b0affected
LinuxLinuxf90cf6079bf67988f8b1ad1ade70fc89d0080905 < 5cfcc8de7d733a1137b86954cc28ce99972311adaffected
LinuxLinuxf90cf6079bf67988f8b1ad1ade70fc89d0080905 < a51335704a3f90eaf23a6864faefca34b382490aaffected
LinuxLinuxf90cf6079bf67988f8b1ad1ade70fc89d0080905 < 76a2c5df6ca8bd8ada45e953b8c72b746f42918daffected
LinuxLinux5.10affected
LinuxLinux0 < 5.10unaffected
LinuxLinux5.10.201 <= 5.10.*unaffected
LinuxLinux5.15.139 <= 5.15.*unaffected
LinuxLinux6.1.63 <= 6.1.*unaffected
LinuxLinux6.5.12 <= 6.5.*unaffected
LinuxLinux6.6.2 <= 6.6.*unaffected
LinuxLinux6.7 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References