NVD Vulnerability Detail

CVE-2023-52918

Summary	In the Linux kernel, the following vulnerability has been resolved: media: pci: cx23885: check cx23885_vdev_init() return cx23885_vdev_init() can return a NULL pointer, but that pointer is used in the next line without a check. Add a NULL pointer check and go to the error unwind if it is NULL.
Publication Date	Oct. 22, 2024, 5:15 p.m.
Registration Date	Oct. 22, 2024, 8 p.m.
Last Update	Oct. 24, 2024, 12:55 p.m.

Affected software configurations

Related information, measures and tools

No	URL	タグ
1	https://git.kernel.org/stable/c/8e31b096e2e1949bc8f0be019c9ae70d414404c6	Patch
2	https://git.kernel.org/stable/c/199a42fc4c45e8b7f19efeb15dbc36889a599ac2	Patch
3	https://git.kernel.org/stable/c/e7385510e2550a9f8b6f3d5f33c5b894ab9ba976	Patch
4	https://git.kernel.org/stable/c/a5f1d30c51c485cec7a7de60205667c3ff86c303	Patch
5	https://git.kernel.org/stable/c/06ee04a907d64ee3910fecedd05d7f1be4b1b70e	Patch
6	https://git.kernel.org/stable/c/b1397fb4a779fca560c43d2acf6702d41b4a495b	Patch
7	https://git.kernel.org/stable/c/15126b916e39b0cb67026b0af3c014bfeb1f76b3	Patch

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-476	NULL ポインタデリファレンス	https://cwe.mitre.org/data/definitions/476.html

JVN Vulnerability Information

Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性

Title	Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性
Summary	Linux の Linux Kernel には、NULL ポインタデリファレンスに関する脆弱性が存在します。
Possible impacts	サービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Oct. 19, 2023, midnight
Registration Date	Oct. 25, 2024, 3:43 p.m.
Last Update	Oct. 25, 2024, 3:43 p.m.

Affected System

Linux

Linux Kernel 4.19.321 未満

Linux Kernel 4.20 以上 5.4.283 未満

Linux Kernel 5.11 以上 5.15.166 未満

Linux Kernel 5.16 以上 6.1.107 未満

Linux Kernel 5.5 以上 5.10.225 未満

Linux Kernel 6.2 以上 6.6.48 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2023-52918	https://www.cve.org/CVERecord?id=CVE-2023-52918
National Vulnerability Database (NVD)
2	CVE-2023-52918	https://nvd.nist.gov/vuln/detail/CVE-2023-52918

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-476	http://cwe.mitre.org/data/definitions/476.html

ベンダー情報

No	Name	URL
Kernel.org git repositories
1	media: pci: cx23885: check cx23885_vdev_init() return (06ee04a)	https://git.kernel.org/stable/c/06ee04a907d64ee3910fecedd05d7f1be4b1b70e
2	media: pci: cx23885: check cx23885_vdev_init() return (15126b9)	https://git.kernel.org/stable/c/15126b916e39b0cb67026b0af3c014bfeb1f76b3
3	media: pci: cx23885: check cx23885_vdev_init() return (199a42f)	https://git.kernel.org/stable/c/199a42fc4c45e8b7f19efeb15dbc36889a599ac2
4	media: pci: cx23885: check cx23885_vdev_init() return (8e31b09)	https://git.kernel.org/stable/c/8e31b096e2e1949bc8f0be019c9ae70d414404c6
5	media: pci: cx23885: check cx23885_vdev_init() return (a5f1d30)	https://git.kernel.org/stable/c/a5f1d30c51c485cec7a7de60205667c3ff86c303
6	media: pci: cx23885: check cx23885_vdev_init() return (b1397fb)	https://git.kernel.org/stable/c/b1397fb4a779fca560c43d2acf6702d41b4a495b
7	media: pci: cx23885: check cx23885_vdev_init() return (e738551)	https://git.kernel.org/stable/c/e7385510e2550a9f8b6f3d5f33c5b894ab9ba976
Linux Kernel
8	Linux Kernel Archives	https://www.kernel.org

Change Log

No	Changed Details	Date of change
1	[2024年10月25日] 掲載	Oct. 25, 2024, 10:38 a.m.