CVE-2023-52918: media: pci: cx23885: check cx23885_vdev_init() return
In the Linux kernel, the following vulnerability has been resolved:
media: pci: cx23885: check cx23885vdevinit() return
cx23885vdevinit() can return a NULL pointer, but that pointer is used in the next line without a check.
Add a NULL pointer check and go to the error unwind if it is NULL.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52918?
CVE-2023-52918 has been classified as a moderate severity vulnerability in the Linux kernel.
How do I fix CVE-2023-52918?
To address CVE-2023-52918, update to the patched versions available in your Linux distribution, such as linux 6.1.123-1 or linux-6.1 6.1.119-1~deb11u1.
Which Linux kernel versions are affected by CVE-2023-52918?
CVE-2023-52918 affects Linux kernel versions prior to 4.19.321 and those between 4.20 and 6.2.
What specific function is associated with CVE-2023-52918?
CVE-2023-52918 is associated with the cx23885_vdev_init() function, which can return a NULL pointer without proper checks.
Is there a known exploit for CVE-2023-52918?
As of now, there are no public exploits specifically targeting CVE-2023-52918.