CVE-2023-52841

2024-05-2116:15:21

416baaa9-dc9f-4396-8d5f-8c081fb06d67

web.nvd.nist.gov

linux kernel

vulnerability

cve-2023-52841

media

vidtv

mux

kstrdup

null pointer dereference

kfree

memory leak

nvd

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.4%

JSON

In the Linux kernel, the following vulnerability has been resolved:

media: vidtv: mux: Add check and kfree for kstrdup

Add check for the return value of kstrdup() and return the error
if it fails in order to avoid NULL pointer dereference.
Moreover, use kfree() in the later error handling in order to avoid
memory leak.

Affected configurations

Vulners

Node

linuxlinux_kernelRange5.10–5.10.201

linuxlinux_kernelRange5.11.0–5.15.139

linuxlinux_kernelRange5.16.0–6.1.63

linuxlinux_kernelRange6.2.0–6.5.12

linuxlinux_kernelRange6.6.0–6.6.2

linuxlinux_kernelRange6.7.0≥

CNA Affected

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/media/test-drivers/vidtv/vidtv_mux.c"
    ],
    "versions": [
      {
        "version": "c2f78f0cb294",
        "lessThan": "64863ba8e6b7",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "c2f78f0cb294",
        "lessThan": "980be4c3b0d5",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "c2f78f0cb294",
        "lessThan": "a254ee1ddc59",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "c2f78f0cb294",
        "lessThan": "cb1300141199",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "c2f78f0cb294",
        "lessThan": "aae7598aff29",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "c2f78f0cb294",
        "lessThan": "1fd6eb12642e",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/media/test-drivers/vidtv/vidtv_mux.c"
    ],
    "versions": [
      {
        "version": "5.10",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "5.10",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.10.201",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.15.139",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.1.63",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.5.12",
        "lessThanOrEqual": "6.5.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.6.2",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.7",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]