Riskcovery

CVE-2023-52763

i3c: master: mipi-i3c-hci: Fix a kernel panic for accessing DAT_data.

State
Published
Severity
Not scored
Published
May 21, 2024
Updated
May 11, 2026
Reserved
May 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

i3c: master: mipi-i3c-hci: Fix a kernel panic for accessing DAT_data.

The `i3c_master_bus_init` function may attach the I2C devices before the I3C bus initialization. In this flow, the DAT `alloc_entry`` will be used before the DAT `init`. Additionally, if the `i3c_master_bus_init` fails, the DAT `cleanup` will execute before the device is detached, which will execue DAT `free_entry` function. The above scenario can cause the driver to use DAT_data when it is NULL.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 3a379bbcea0af6280e1ca0d1edfcf4e68cde6ee0 to before 39c71357e68e2f03766f9321b9f4882e49ff1442Affected
  • 3a379bbcea0af6280e1ca0d1edfcf4e68cde6ee0 to before e64d23dc65810be4e3395d72df0c398f60c991f9Affected
  • 3a379bbcea0af6280e1ca0d1edfcf4e68cde6ee0 to before 3cb79a365e7cce8f121bba91312e2ddd206b9781Affected
  • 3a379bbcea0af6280e1ca0d1edfcf4e68cde6ee0 to before eed74230435c61eeb58abaa275b1820e6a4b7f02Affected
  • 3a379bbcea0af6280e1ca0d1edfcf4e68cde6ee0 to before b53e9758a31c683fc8615df930262192ed5f034bAffected
LinuxLinux
  • 5.0Affected
  • before 5.0Not affected
  • 5.15.140 through 5.15.*Not affected
  • 6.1.64 through 6.1.*Not affected
  • 6.5.13 through 6.5.*Not affected
  • 6.6.3 through 6.6.*Not affected
  • 6.7 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.