CVE-2023-52459

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

media: v4l: async: Fix duplicated list deletion

The list deletion call dropped here is already called from the helper function in the line before. Having a second list_del() call results in either a warning (with CONFIG_DEBUG_LIST=y):

list_del corruption, c46c8198->next is LIST_POISON1 (00000100)

If CONFIG_DEBUG_LIST is disabled the operation results in a kernel error due to NULL pointer dereference.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

VendorProductVersions
LinuxLinux>= 28a1295795d85a25f2e7dd391c43969e95fcb341, < b7062628caeaec90e8f691ebab2d70f31b7b6b91; >= 28a1295795d85a25f2e7dd391c43969e95fcb341, < 49d82811428469566667f22749610b8c132cdb3e; >= 28a1295795d85a25f2e7dd391c43969e95fcb341, < 3de6ee94aae701fa949cd3b5df6b6a440ddfb8f2
LinuxLinux6.6

References

Timeline

Published
Feb 23, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-52468.8Authentication Bypass by Capture-replay in SICK Flexi Soft Gateways with Partnumbers 1044073, 1127717, 1130282, 1044074, 1121597, 1099832, 1CVE-2023-524605.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix NULL pointer dereference at hibernate During hibeCVE-2023-524617.8In the Linux kernel, the following vulnerability has been resolved: drm/sched: Fix bounds limiting when given a malformed entity If we're CVE-2023-524625.5In the Linux kernel, the following vulnerability has been resolved: bpf: fix check for attempt to corrupt spilled pointer When register isCVE-2023-524635.5In the Linux kernel, the following vulnerability has been resolved: efivarfs: force RO when remounting if SetVariable is not supported If CVE-2023-524647.8In the Linux kernel, the following vulnerability has been resolved: EDAC/thunderx: Fix possible out-of-bounds string access Enabling -WstrCVE-2023-524655.5In the Linux kernel, the following vulnerability has been resolved: power: supply: Fix null pointer dereference in smb2_probe devm_kasprinCVE-2023-524675.5In the Linux kernel, the following vulnerability has been resolved: mfd: syscon: Fix null pointer dereference in of_syscon_register() kaspCVE-2023-524687.8In the Linux kernel, the following vulnerability has been resolved: class: fix use-after-free in class_register() The lock_class_key is stCVE-2023-524697.8In the Linux kernel, the following vulnerability has been resolved: drivers/amd/pm: fix a use-after-free in kv_parse_power_table When ps aCVE-2023-52477.8Malicious Code Execution Vulnerability due to External Control of File Name or Path in multiple Mitsubishi Electric FA Engineering Software CVE-2023-524705.5In the Linux kernel, the following vulnerability has been resolved: drm/radeon: check the alloc_workqueue return value in radeon_crtc_init(
CVE-2023-52459: Medium severity, CVSS 5.5 | Vulnix