Riskcovery

CVE-2023-52459

media: v4l: async: Fix duplicated list deletion

State
Published
Severity
Not scored
Published
Feb 23, 2024
Updated
May 11, 2026
Reserved
Feb 20, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

media: v4l: async: Fix duplicated list deletion

The list deletion call dropped here is already called from the helper function in the line before. Having a second list_del() call results in either a warning (with CONFIG_DEBUG_LIST=y):

list_del corruption, c46c8198->next is LIST_POISON1 (00000100)

If CONFIG_DEBUG_LIST is disabled the operation results in a kernel error due to NULL pointer dereference.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 28a1295795d85a25f2e7dd391c43969e95fcb341 to before b7062628caeaec90e8f691ebab2d70f31b7b6b91Affected
  • 28a1295795d85a25f2e7dd391c43969e95fcb341 to before 49d82811428469566667f22749610b8c132cdb3eAffected
  • 28a1295795d85a25f2e7dd391c43969e95fcb341 to before 3de6ee94aae701fa949cd3b5df6b6a440ddfb8f2Affected
LinuxLinux
  • 6.6Affected
  • before 6.6Not affected
  • 6.6.14 through 6.6.*Not affected
  • 6.7.2 through 6.7.*Not affected
  • 6.8 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.