Buffer overflow in Linux
CVE-2023-52495
In the Linux kernel, the following vulnerability has been resolved: soc: qcom: pmic_glink_altmode: fix port sanity check The PMIC GLINK altmode driver currently supports at most two ports. Fix the incomplete port sanity check on notifications to avoid accessing and corrupting memory beyond the port array if we ever get a notification for an unsupported port.
Vulnerability class: Buffer Overflow
EPSS: 0.003 (20.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Linux — versions 080b4e24852b1d5b66929f69344e6c3eeb963941, 6.3, 0
- Linux Linux_kernel
Weakness classification (CWE)
References
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch, Mailing List)
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch, Mailing List)
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch, Mailing List)
Frequently asked questions
- What is CVE-2023-52495?
- CVE-2023-52495 is a high-severity vulnerability in Linux, classified under Out-of-bounds Write. CVSS score: 7.8/10. Published 2024-03-11.
- How severe is CVE-2023-52495?
- High severity. CVSS v3 base score is 7.8 out of 10.