CVEvulnerability
CVE-2023-52495
7.8 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2024-03-11
- Last modified
- 2026-06-17
- Assigner
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-787
Description
In the Linux kernel, the following vulnerability has been resolved:
soc: qcom: pmic_glink_altmode: fix port sanity check
The PMIC GLINK altmode driver currently supports at most two ports.
Fix the incomplete port sanity check on notifications to avoid
accessing and corrupting memory beyond the port array if we ever get a
notification for an unsupported port.
Affected configurations
• linux linux kernel (>= 6.3 < 6.6.15)
• linux linux kernel (>= 6.7 < 6.7.3)
Related
Weakness · CWE (1)
- CWE-787 Out-of-bounds Write weakness
References
- https://git.kernel.org/stable/c/532a5557da6892a6b2d5793052e1bce1f4c9e177 Mailing List, Patch
- https://git.kernel.org/stable/c/c4fb7d2eac9ff9bfc35a2e4d40c7169a332416e0 Mailing List, Patch
- https://git.kernel.org/stable/c/d26edf4ee3672cc9828f2a3ffae34086a712574d Mailing List, Patch
- https://git.kernel.org/stable/c/532a5557da6892a6b2d5793052e1bce1f4c9e177 Mailing List, Patch
- https://git.kernel.org/stable/c/c4fb7d2eac9ff9bfc35a2e4d40c7169a332416e0 Mailing List, Patch
- https://git.kernel.org/stable/c/d26edf4ee3672cc9828f2a3ffae34086a712574d Mailing List, Patch