CVE-2023-52841

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

media: vidtv: mux: Add check and kfree for kstrdup

Add check for the return value of kstrdup() and return the error if it fails in order to avoid NULL pointer dereference. Moreover, use kfree() in the later error handling in order to avoid memory leak.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-401CWE-476

Affected software

VendorProductVersions
LinuxLinux>= c2f78f0cb294aa6f009d3a170f4ee8ad199ba5da, < 64863ba8e6b7651d994c6e6d506cc8aa2ac45edb; >= c2f78f0cb294aa6f009d3a170f4ee8ad199ba5da, < 980be4c3b0d51c0f873fd750117774561c66cf68; >= c2f78f0cb294aa6f009d3a170f4ee8ad199ba5da, < a254ee1ddc592ae1efcce96b8c014e1bd2d5a2b4; >= c2f78f0cb294aa6f009d3a170f4ee8ad199ba5da, < cb13001411999adb158b39e76d94705eb2da100d; >= c2f78f0cb294aa6f009d3a170f4ee8ad199ba5da, < aae7598aff291d4d140be1355aa20930af948785; >= c2f78f0cb294aa6f009d3a170f4ee8ad199ba5da, < 1fd6eb12642e0c32692924ff359c07de4b781d78
LinuxLinux5.10

References

Timeline

Published
May 21, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2023

CVE-2023-528427.1In the Linux kernel, the following vulnerability has been resolved: virtio/vsock: Fix uninit-value in virtio_transport_recv_pkt() KMSAN reCVE-2023-528435.5In the Linux kernel, the following vulnerability has been resolved: llc: verify mac len before reading mac header LLC reads the mac headerCVE-2023-528446.2In the Linux kernel, the following vulnerability has been resolved: media: vidtv: psi: Add check for kstrdup Add check for the return valuCVE-2023-528455.5In the Linux kernel, the following vulnerability has been resolved: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING syzCVE-2023-528467.8In the Linux kernel, the following vulnerability has been resolved: hsr: Prevent use after free in prp_create_tagged_frame() The prp_fill_CVE-2023-528477.0In the Linux kernel, the following vulnerability has been resolved: media: bttv: fix use after free error due to btv->timeout timer There CVE-2023-528485.5In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to drop meta_inode's page cache in f2fs_put_super() syzbot rCVE-2023-528495.5In the Linux kernel, the following vulnerability has been resolved: cxl/mem: Fix shutdown order Ira reports that removing cxl_mock_mem cauCVE-2023-52857.5A vulnerability classified as critical was found in Tongda OA 2017. Affected by this vulnerability is an unknown functionality of the file gCVE-2023-528505.5In the Linux kernel, the following vulnerability has been resolved: media: hantro: Check whether reset op is defined before use The i.MX8MCVE-2023-528517.8In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Fix init stage error handling to avoid double free of same QP CVE-2023-528527.8In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: fix to avoid use-after-free on dic Call trace: __memc
CVE-2023-52841: Medium severity, CVSS 5.5 | Vulnix