CVE-2023-0615

2023-02-0600:00:00

CWE-20

redhat

www.cve.org

memory leak

integer overflow

linux kernel v4l2

vivid test code

local user

system crash

AI Score

5.9

Confidence

High

EPSS

Percentile

5.1%

JSON

A memory leak flaw and potential divide by zero and Integer overflow was found in the Linux kernel V4L2 and vivid test code functionality. This issue occurs when a user triggers ioctls, such as VIDIOC_S_DV_TIMINGS ioctl. This could allow a local user to crash the system if vivid test code enabled.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Kernel",
    "versions": [
      {
        "version": "Linux kernel 6.2-rc6",
        "status": "affected"
      }
    ]
  }
]