CVE-2023-53242

Summary

In the Linux kernel, the following vulnerability has been resolved:

thermal/drivers/hisi: Drop second sensor hi3660

The commit 74c8e6bffbe1 ("driver core: Add __alloc_size hint to devm allocators") exposes a panic "BRK handler: Fatal exception" on the hi3660_thermal_probe funciton. This is because the function allocates memory for only one sensors array entry, but tries to fill up a second one.

Fix this by removing the unneeded second access.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux7d3a2a2bbadb4bf5856ed394ba09b8fbb7a80460 < 3cf2181e438f43ed24e12424fe36d156cca233b9affected
LinuxLinux7d3a2a2bbadb4bf5856ed394ba09b8fbb7a80460 < e02bc492883abf751fd1a8d89fc025fbce6744c6affected
LinuxLinux7d3a2a2bbadb4bf5856ed394ba09b8fbb7a80460 < f5aaf140ab1c02889c088e1b1098adad600541afaffected
LinuxLinux7d3a2a2bbadb4bf5856ed394ba09b8fbb7a80460 < 9f6756cd09889c7201ee31e6f76fbd914fb0b80daffected
LinuxLinux7d3a2a2bbadb4bf5856ed394ba09b8fbb7a80460 < 68e675a9b69cfc34dd915d91a4650e3ee53421f4affected
LinuxLinux7d3a2a2bbadb4bf5856ed394ba09b8fbb7a80460 < 15cc25829a97c3957e520e971868aacc84341317affected
LinuxLinux4.20affected
LinuxLinux0 < 4.20unaffected
LinuxLinux5.4.235 <= 5.4.*unaffected
LinuxLinux5.10.173 <= 5.10.*unaffected
LinuxLinux5.15.99 <= 5.15.*unaffected
LinuxLinux6.1.16 <= 6.1.*unaffected
LinuxLinux6.2.3 <= 6.2.*unaffected
LinuxLinux6.3 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References