CVE-2023-52844: media: vidtv: psi: Add check for kstrdup
Published May 21, 2024
·Updated
In the Linux kernel, the following vulnerability has been resolved:
media: vidtv: psi: Add check for kstrdup
Add check for the return value of kstrdup() and return the error if it fails in order to avoid NULL pointer dereference.
Affected Software
6 affected components
Linux Kernel
Linux Linux kernel>=5.10<5.10.201
Linux Linux kernel>=5.11<5.15.139
Linux Linux kernel>=5.16<6.1.63
Linux Linux kernel>=6.2<6.5.12
Linux Linux kernel>=6.6<6.6.2
Remediation
Event History
May 21, 2024
CVE Published
via MITRE·03:31 PM
Data Sourced
via MITRE·03:31 PM
Description
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-52844?
CVE-2023-52844 has been classified as a medium-severity vulnerability.
2
How do I fix CVE-2023-52844?
To fix CVE-2023-52844, update your Linux kernel to a patched version provided by your distribution.
3
What systems are affected by CVE-2023-52844?
CVE-2023-52844 affects systems running the Linux kernel, particularly those using the media: vidtv: psi subsystem.
4
What are the consequences of not addressing CVE-2023-52844?
Not addressing CVE-2023-52844 may lead to potential crashes or unexpected behavior due to NULL pointer dereferencing.
5
Is CVE-2023-52844 a remote or local vulnerability?
CVE-2023-52844 is considered a local vulnerability that requires access to the affected system to exploit.