CVE-2023-52870

MediumCVSS 4.1/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data

Add the check for the return value of mtk_alloc_clk_data() in order to avoid NULL pointer dereference.

Metrics

CVSS 3.1 4.1/10CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

VendorProductVersions
LinuxLinux>= 1aca9939bf72893887cb7e3455e44c864bada2f9, < 2617aa8ceaf30e41d3eb7f5fef3445542bef193a; >= 1aca9939bf72893887cb7e3455e44c864bada2f9, < 533ca5153ad6c7b7d47ae0114b14d0333964b946; >= 1aca9939bf72893887cb7e3455e44c864bada2f9, < dd1f30d68fa98eb672c0a259297b761656a9025f; >= 1aca9939bf72893887cb7e3455e44c864bada2f9, < 10cc81124407d862f0f747db4baa9c006510b480; >= 1aca9939bf72893887cb7e3455e44c864bada2f9, < b5ff3e89b4e7f46ad2aa0de7e08d18e6f87d71bc; >= 1aca9939bf72893887cb7e3455e44c864bada2f9, < b82681042724924ae3ba0f2f2eeec217fa31e830
LinuxLinux5.8

References

Timeline

Published
May 21, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2023

CVE-2023-528715.5In the Linux kernel, the following vulnerability has been resolved: soc: qcom: llcc: Handle a second device without data corruption UsuallCVE-2023-528727.8In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: fix race condition in status line change on dead connectionCVE-2023-528735.5In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data Add the chCVE-2023-528745.5In the Linux kernel, the following vulnerability has been resolved: x86/tdx: Zero out the missing RSI in TDX_HYPERCALL macro In the TDX_HYCVE-2023-528755.5In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data Add the chCVE-2023-528765.5In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data Add thCVE-2023-528775.5In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() It isCVE-2023-528785.5In the Linux kernel, the following vulnerability has been resolved: can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb CVE-2023-528795.5In the Linux kernel, the following vulnerability has been resolved: tracing: Have trace_event_file have ref counters The following can craCVE-2023-52889.8A remote unauthorized attacker may connect to the SIM1012, interact with the device and change configuration settings. The adversary may alsCVE-2023-528805.5In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc Any unprivCVE-2023-528815.5In the Linux kernel, the following vulnerability has been resolved: tcp: do not accept ACK of bytes we never sent This patch is based on a
CVE-2023-52870: Medium severity, CVSS 4.1 | Vulnix