[Forgot Password]
Login  Register Subscribe

30481

 
 

423868

 
 

256610

 
 

909

 
 

199263

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2023-52647Date: (C)2024-06-27   (M)2024-06-27


In the linux kernel, the following vulnerability has been resolved medianxp imx8-isi check whether crossbar pad is non-null before access whentranslating source to sink streams in the crossbar subdev, the driver triesto locate the remote subdev connected to the sink pad. the remote pad maybe null, if userspace tries to enable a stream that ends at an unconnectedcrossbar sink. when that occurs, the driver dereferences the null pad,leading to a crash. prevent the crash by checking if the pad is null beforeusing it, and return an error if it is.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V3 Severity:CVSS V2 Severity:
CVSS Score : 7.5CVSS Score : 5.0
Exploit Score: 3.9Exploit Score: 10.0
Impact Score: 3.6Impact Score: 2.9
 
CVSS V3 Metrics:CVSS V2 Metrics:
Attack Vector: NETWORKAccess Vector: NETWORK
Attack Complexity: LOWAccess Complexity: LOW
Privileges Required: NONEAuthentication: NONE
User Interaction: NONEConfidentiality: NONE
Scope: UNCHANGEDIntegrity: NONE
Confidentiality: NONEAvailability: PARTIAL
Integrity: NONE 
Availability: HIGH 
  
Reference:
https://ubuntu.com/security/CVE-2023-52647

OVAL    3
oval:org.secpod.oval:def:709006
oval:org.secpod.oval:def:708990
oval:org.secpod.oval:def:708989
XCCDF    1

© SecPod Technologies