CVE-2023-52647: media: nxp: imx8-isi: Check whether crossbar pad is non-NULL before access
In the Linux kernel, the following vulnerability has been resolved:
media: nxp: imx8-isi: Check whether crossbar pad is non-NULL before access
When translating source to sink streams in the crossbar subdev, the driver tries to locate the remote subdev connected to the sink pad. The remote pad may be NULL, if userspace tries to enable a stream that ends at an unconnected crossbar sink. When that occurs, the driver dereferences the NULL pad, leading to a crash.
Prevent the crash by checking if the pad is NULL before using it, and return an error if it is.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52647?
CVE-2023-52647 is classified with a medium severity level.
How do I fix CVE-2023-52647?
To mitigate CVE-2023-52647, update your Linux kernel to one of the fixed versions: 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, 6.12.10-1, or 6.12.11-1.
Which Linux distributions are affected by CVE-2023-52647?
CVE-2023-52647 affects Debian's Linux kernel packages.
What component of the Linux kernel is affected by CVE-2023-52647?
CVE-2023-52647 impacts the media subsystem related to the nxp imx8-isi driver.
Is there any exploit known for CVE-2023-52647?
As of now, there are no known public exploits specifically targeting CVE-2023-52647.