Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-31081
HistoryApr 24, 2023 - 12:00 a.m.

CVE-2023-31081

2023-04-2400:00:00
ubuntu.com
ubuntu.com
12
cve-2023-31081
vidtv_mux_stop_thread
vidtv_stop_streaming
drivers/media/test-drivers
bugzilla.suse.com
dvb test drivers
ubuntu kernel
unfixed upstream

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

5.1%

An issue was discovered in drivers/media/test-drivers/vidtv/vidtv_bridge.c
in the Linux kernel 6.2. There is a NULL pointer dereference in
vidtv_mux_stop_thread. In vidtv_stop_streaming, after dvb->mux=NULL occurs,
it executes vidtv_mux_stop_thread(dvb->mux).

Bugs

Notes

Author Note
sbeattie v4l test drivers, specifically the DVB test drivers. These are only built when the CONFIG_DVB_TEST_DRIVERS kernel config option is enabled, which is not enabled in any supported Ubuntu kernel configuration. Therefore, Ubuntu kernels are not affected. unfixed upstream as of 2023.10.16
OSVersionArchitecturePackageVersionFilename
ubuntu24.04noarchlinux-gke< anyUNKNOWN
ubuntu24.04noarchlinux-nvidia< anyUNKNOWN

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

5.1%

Related for UB:CVE-2023-31081