Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2023-52841
HistoryMay 21, 2024 - 3:31 p.m.

CVE-2023-52841 media: vidtv: mux: Add check and kfree for kstrdup

2024-05-2115:31:40
Linux
github.com
1
media handling
vidtv
multiplexer
kstrdup
kfree
error handling
null pointer dereference
memory leak
cve-2023-52841

6.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.5%

In the Linux kernel, the following vulnerability has been resolved:

media: vidtv: mux: Add check and kfree for kstrdup

Add check for the return value of kstrdup() and return the error
if it fails in order to avoid NULL pointer dereference.
Moreover, use kfree() in the later error handling in order to avoid
memory leak.

CNA Affected

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/media/test-drivers/vidtv/vidtv_mux.c"
    ],
    "versions": [
      {
        "version": "c2f78f0cb294",
        "lessThan": "64863ba8e6b7",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "c2f78f0cb294",
        "lessThan": "980be4c3b0d5",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "c2f78f0cb294",
        "lessThan": "a254ee1ddc59",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "c2f78f0cb294",
        "lessThan": "cb1300141199",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "c2f78f0cb294",
        "lessThan": "aae7598aff29",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "c2f78f0cb294",
        "lessThan": "1fd6eb12642e",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/media/test-drivers/vidtv/vidtv_mux.c"
    ],
    "versions": [
      {
        "version": "5.10",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "5.10",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.10.201",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.15.139",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.1.63",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.5.12",
        "lessThanOrEqual": "6.5.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.6.2",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.7",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

6.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.5%

Related for VULNRICHMENT:CVE-2023-52841