CVE-2023-0615

2023-02-0600:00:00

ubuntu.com

cve-2023-0615

memory leak

divide by zero

integer overflow

linux kernel

v4l2

vivid test code

ioctl

config_video_vivid

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

Percentile

5.1%

JSON

A memory leak flaw and potential divide by zero and Integer overflow was
found in the Linux kernel V4L2 and vivid test code functionality. This
issue occurs when a user triggers ioctls, such as VIDIOC_S_DV_TIMINGS
ioctl. This could allow a local user to crash the system if vivid test code
enabled.

Bugs

Notes

Author	Note
sbeattie	should consider disabling the CONFIG_VIDEO_VIVID option.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchlinux< anyUNKNOWN
ubuntu20.04noarchlinux< 5.4.0-139.156UNKNOWN
ubuntu22.04noarchlinux< 5.15.0-60.66UNKNOWN
ubuntu18.04noarchlinux-aws< anyUNKNOWN
ubuntu20.04noarchlinux-aws< 5.4.0-1096.104UNKNOWN
ubuntu22.04noarchlinux-aws< 5.15.0-1030.34UNKNOWN
ubuntu20.04noarchlinux-aws-5.15< 5.15.0-1030.34~20.04.1UNKNOWN
ubuntu18.04noarchlinux-aws-5.4< anyUNKNOWN
ubuntu16.04noarchlinux-aws-hwe< 4.15.0-1151.164~16.04.1UNKNOWN
ubuntu20.04noarchlinux-azure< 5.4.0-1103.109UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	linux	< any	UNKNOWN
ubuntu	20.04	noarch	linux	< 5.4.0-139.156	UNKNOWN
ubuntu	22.04	noarch	linux	< 5.15.0-60.66	UNKNOWN
ubuntu	18.04	noarch	linux-aws	< any	UNKNOWN
ubuntu	20.04	noarch	linux-aws	< 5.4.0-1096.104	UNKNOWN
ubuntu	22.04	noarch	linux-aws	< 5.15.0-1030.34	UNKNOWN
ubuntu	20.04	noarch	linux-aws-5.15	< 5.15.0-1030.34~20.04.1	UNKNOWN
ubuntu	18.04	noarch	linux-aws-5.4	< any	UNKNOWN
ubuntu	16.04	noarch	linux-aws-hwe	< 4.15.0-1151.164~16.04.1	UNKNOWN
ubuntu	20.04	noarch	linux-azure	< 5.4.0-1103.109	UNKNOWN