CVE-2023-52495: soc: qcom: pmic_glink_altmode: fix port sanity check
In the Linux kernel, the following vulnerability has been resolved:
soc: qcom: pmicglinkaltmode: fix port sanity check
The PMIC GLINK altmode driver currently supports at most two ports.
Fix the incomplete port sanity check on notifications to avoid accessing and corrupting memory beyond the port array if we ever get a notification for an unsupported port.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52495?
CVE-2023-52495 has been classified as a moderate severity vulnerability in the Linux kernel.
How do I fix CVE-2023-52495?
To fix CVE-2023-52495, update the Linux kernel to one of the patched versions: 5.10.223-1, 5.10.226-1, 6.1.119-1, 6.1.123-1, 6.12.11-1, or 6.12.12-1.
Which Linux kernel versions are affected by CVE-2023-52495?
CVE-2023-52495 affects multiple versions of the Linux kernel including 5.10.x, 6.1.x, and 6.12.x.
What are the implications of CVE-2023-52495 if left unpatched?
If CVE-2023-52495 is left unpatched, it could lead to potential access and corruption of memory due to inadequate port sanity checks.
Is there a workaround for CVE-2023-52495?
Currently, there are no documented workarounds for CVE-2023-52495, and applying the recommended updates is the best course of action.