Back
CVE-2023-52844
media: vidtv: psi: Add check for kstrdup
Medium6.2EPSS 0.25%
- Published
- Updated
- Reserved
- Assigned by
- Linux
Description
In the Linux kernel, the following vulnerability has been resolved: media: vidtv: psi: Add check for kstrdup Add check for the return value of kstrdup() and return the error if it fails in order to avoid NULL pointer dereference.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| CISA-ADPADP (enrichment) | 3.1 | Medium6.2 | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| NVDNVD · Analyzed | 3.1 | Medium6.2 | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.25% · top 83% of all CVEs (2 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.2.
Weakness
Affected products
Linux · Linux
- affected f90cf6079bf67988f8b1ad1ade70fc89d0080905 – < 3387490c89b10aeb4e71d78b65dbc9ba4b2385b9
- affected f90cf6079bf67988f8b1ad1ade70fc89d0080905 – < d17269fb9161995303985ab2fe6f16cfb72152f9
- affected f90cf6079bf67988f8b1ad1ade70fc89d0080905 – < 5c26aae3723965c291c65dd2ecad6a3240d422b0
- affected f90cf6079bf67988f8b1ad1ade70fc89d0080905 – < 5cfcc8de7d733a1137b86954cc28ce99972311ad
- affected f90cf6079bf67988f8b1ad1ade70fc89d0080905 – < a51335704a3f90eaf23a6864faefca34b382490a
- affected f90cf6079bf67988f8b1ad1ade70fc89d0080905 – < 76a2c5df6ca8bd8ada45e953b8c72b746f42918d
Linux · Linux
- affected 5.10
- unaffected < 5.10
- unaffected 5.10.201 – ≤ 5.10.*
- unaffected 5.15.139 – ≤ 5.15.*
- unaffected 6.1.63 – ≤ 6.1.*
- unaffected 6.5.12 – ≤ 6.5.*
- unaffected 6.6.2 – ≤ 6.6.*
- unaffected 6.7 – ≤ *
References (6)
- https://git.kernel.org/stable/c/3387490c89b10aeb4e71d78b65dbc9ba4b2385b9 (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/d17269fb9161995303985ab2fe6f16cfb72152f9 (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/5c26aae3723965c291c65dd2ecad6a3240d422b0 (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/5cfcc8de7d733a1137b86954cc28ce99972311ad (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/a51335704a3f90eaf23a6864faefca34b382490a (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/76a2c5df6ca8bd8ada45e953b8c72b746f42918d (opens in a new tab)x_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Record last updated .