CVE-2023-52858: clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
In the Linux kernel, the following vulnerability has been resolved:
clk: mediatek: clk-mt7629: Add check for mtkallocclkdata
Add the check for the return value of mtkallocclkdata() in order to avoid NULL pointer dereference.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52858?
CVE-2023-52858 is classified as a high-severity vulnerability due to the risk of NULL pointer dereference in the Linux kernel.
How do I fix CVE-2023-52858?
To address CVE-2023-52858, ensure that your Linux kernel is updated to a version that incorporates the patch which adds a check for the return value of mtk_alloc_clk_data.
What software versions are affected by CVE-2023-52858?
CVE-2023-52858 affects various Linux kernel versions ranging from 5.0 up to and including 6.6.2.
What is the impact of CVE-2023-52858?
The impact of CVE-2023-52858 can lead to potential system instability or crashes due to a NULL pointer dereference.
Is CVE-2023-52858 exploitable?
Yes, CVE-2023-52858 is considered exploitable under certain conditions, making it critical to apply patches promptly.