CVE-2023-52766

i3c: mipi-i3c-hci: Fix out of bounds access in hci_dma_irq_handler

State: Published
Severity: 7.8 High
Published: May 21, 2024
Updated: Aug 5, 2026
Reserved: May 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

i3c: mipi-i3c-hci: Fix out of bounds access in hci_dma_irq_handler

Do not loop over ring headers in hci_dma_irq_handler() that are not allocated and enabled in hci_dma_init(). Otherwise out of bounds access will occur from rings->headers[i] access when i >= number of allocated ring headers.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	3a379bbcea0af6280e1ca0d1edfcf4e68cde6ee0 to before d23ad76f240c0f597b7a9eb79905d246f27d40dfAffected 3a379bbcea0af6280e1ca0d1edfcf4e68cde6ee0 to before 8be39f66915b40d26ea2c18ba84b5c3d5da6809bAffected 3a379bbcea0af6280e1ca0d1edfcf4e68cde6ee0 to before 7c2b91b30d74d7c407118ad72502d4ca28af1af6Affected 3a379bbcea0af6280e1ca0d1edfcf4e68cde6ee0 to before 4c86cb2321bd9c72d3b945ce7f747961beda8e65Affected 3a379bbcea0af6280e1ca0d1edfcf4e68cde6ee0 to before 45a832f989e520095429589d5b01b0c65da9b574Affected
LinuxLinux	5.0Affected before 5.0Not affected 5.15.140 through 5.15.Not affected 6.1.64 through 6.1.Not affected 6.5.13 through 6.5.Not affected 6.6.3 through 6.6.Not affected 6.7 and laterNot affected

Product

Versions

LinuxLinux

3a379bbcea0af6280e1ca0d1edfcf4e68cde6ee0 to before d23ad76f240c0f597b7a9eb79905d246f27d40dfAffected
3a379bbcea0af6280e1ca0d1edfcf4e68cde6ee0 to before 8be39f66915b40d26ea2c18ba84b5c3d5da6809bAffected
3a379bbcea0af6280e1ca0d1edfcf4e68cde6ee0 to before 7c2b91b30d74d7c407118ad72502d4ca28af1af6Affected
3a379bbcea0af6280e1ca0d1edfcf4e68cde6ee0 to before 4c86cb2321bd9c72d3b945ce7f747961beda8e65Affected
3a379bbcea0af6280e1ca0d1edfcf4e68cde6ee0 to before 45a832f989e520095429589d5b01b0c65da9b574Affected

LinuxLinux

5.0Affected
before 5.0Not affected
5.15.140 through 5.15.*Not affected
6.1.64 through 6.1.*Not affected
6.5.13 through 6.5.*Not affected
6.6.3 through 6.6.*Not affected
6.7 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.