CVE-2023-52875 - clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data · CoreCVE

Back Back to CVE browser

MEDIUM

clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data

Published May 21, 2024

5.5

MEDIUM

CVSS 3.1

EPSS 0.23%

Description

Add the check for the return value of mtk_alloc_clk_data() in order to avoid NULL pointer dereference.

Affected products

Vendor Linux Product Linux Default
unaffected
- Version
  e9862118272a
  Status
  affected
  Constraints
  <001e5def774f
- Version
  e9862118272a
  Status
  affected
  Constraints
  <0d6e24b422a2
- Version
  e9862118272a
  Status
  affected
  Constraints
  <1953e62366da
- Version
  e9862118272a
  Status
  affected
  Constraints
  <1bf9c204aef4
- Version
  e9862118272a
  Status
  affected
  Constraints
  <2a18dd653284
- Version
  e9862118272a
  Status
  affected
  Constraints
  <6fccee2af400
- Version
  e9862118272a
  Status
  affected
  Constraints
  <d1175cf4bd2b
- Version
  e9862118272a
  Status
  affected
  Constraints
  <d1461f0c9ca0
- Version
  e9862118272a
  Status
  affected
  Constraints
  <e61934720af4
Vendor Linux Product Linux Default
affected
- Version
  4.10
  Status
  affected
  Constraints
  -
- Version
  0
  Status
  unaffected
  Constraints
  <4.10
- Version
  4.14.330
  Status
  unaffected
  Constraints
  <=4.14.*
- Version
  4.19.299
  Status
  unaffected
  Constraints
  <=4.19.*
- Version
  5.10.201
  Status
  unaffected
  Constraints
  <=5.10.*
- Version
  5.15.139
  Status
  unaffected
  Constraints
  <=5.15.*
- Version
  5.4.261
  Status
  unaffected
  Constraints
  <=5.4.*
- Version
  6.1.63
  Status
  unaffected
  Constraints
  <=6.1.*
- Version
  6.5.12
  Status
  unaffected
  Constraints
  <=6.5.*
- Version
  6.6.2
  Status
  unaffected
  Constraints
  <=6.6.*
- Version
  6.7
  Status
  unaffected
  Constraints
  <=*

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

unaffected

Version	Status	Constraints
e9862118272a	affected	<001e5def774f
e9862118272a	affected	<0d6e24b422a2
e9862118272a	affected	<1953e62366da
e9862118272a	affected	<1bf9c204aef4
e9862118272a	affected	<2a18dd653284
e9862118272a	affected	<6fccee2af400
e9862118272a	affected	<d1175cf4bd2b
e9862118272a	affected	<d1461f0c9ca0
e9862118272a	affected	<e61934720af4

affected

Version	Status	Constraints
4.10	affected	-
0	unaffected	<4.10
4.14.330	unaffected	<=4.14.*
4.19.299	unaffected	<=4.19.*
5.10.201	unaffected	<=5.10.*
5.15.139	unaffected	<=5.15.*
5.4.261	unaffected	<=5.4.*
6.1.63	unaffected	<=6.1.*
6.5.12	unaffected	<=6.5.*
6.6.2	unaffected	<=6.6.*
6.7	unaffected	<=*

Red Hat Enterprise Linux 6

kernel

Not affected
Red Hat Enterprise Linux 7

kernel

Not affected
Red Hat Enterprise Linux 7

kernel-rt

Not affected
Red Hat Enterprise Linux 8

kernel

Not affected
Red Hat Enterprise Linux 8

kernel-rt

Not affected
Red Hat Enterprise Linux 9

kernel

Not affected
Red Hat Enterprise Linux 9

kernel-rt

Not affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 6	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel-rt	Not affected	n/a
Red Hat Enterprise Linux 8	kernel	Not affected	n/a
Red Hat Enterprise Linux 8	kernel-rt	Not affected	n/a
Red Hat Enterprise Linux 9	kernel	Not affected	n/a
Red Hat Enterprise Linux 9	kernel-rt	Not affected	n/a

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-476

NULL Pointer Dereference

References (15)

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2023-52875		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2282723		Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-59588		Advisory
https://git.kernel.org/stable/c/001e5def774fa1a8f2b29567c0b0cd3e3a859a96		Patch
https://git.kernel.org/stable/c/0d6e24b422a2166a9297a8286ff2e6ab9a5e8cd3		Patch
https://git.kernel.org/stable/c/1953e62366da5460dc712e045f94fb0d8918999d		Patch
https://git.kernel.org/stable/c/1bf9c204aef4cc55ce46a7ff2d4dc7e5f86551a7		Patch
https://git.kernel.org/stable/c/2a18dd653284550900b02107c3c7b3ac5e0eb802		Patch
https://git.kernel.org/stable/c/6fccee2af400edaed9cf349d506c5971d4762739		Patch
https://git.kernel.org/stable/c/d1175cf4bd2b4c5f7c43f677ea1ce9ad2c18d055		Patch
https://git.kernel.org/stable/c/d1461f0c9ca0827c03730fe9652ebbf6316a2a95		Patch
https://git.kernel.org/stable/c/e61934720af4a58ffd43a63ffdd6f3a0bd7d7b47		Patch
https://lore.kernel.org/linux-cve-announce/2024052121-CVE-2023-52875-99fe@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2023-52875
https://www.cve.org/CVERecord?id=CVE-2023-52875

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Linux

Published May 21, 2024

Updated May 11, 2026

Reserved May 21, 2024

Link CVE-2023-52875

CISA Vulnrichment

Updated Sep 10, 2024

Status Analyzed

Modified Jun 17, 2026

Link CVE-2023-52875

Severity Low

Public date May 21, 2024

Links CVE-2023-52875 - Bugzilla

Assigner Linux

Published May 21, 2024

Updated May 11, 2026

Exploited since n/a

Link EUVD-2023-59588

EUVD-2023-59588