CVE-2023-52789

tty: vcc: Add check for kstrdup() in vcc_probe()

State: Published
Severity: Not scored
Published: May 21, 2024
Updated: May 11, 2026
Reserved: May 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

tty: vcc: Add check for kstrdup() in vcc_probe()

Add check for the return value of kstrdup() and return the error, if it fails in order to avoid NULL pointer dereference.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	5d171050e28f823aeb040f2830da4d3422b54b63 to before 38cd56fc9de78bf3c878790785e8c231116ef9d3Affected 5d171050e28f823aeb040f2830da4d3422b54b63 to before 909963e0c16778cec28efb1affc21558825f4200Affected 5d171050e28f823aeb040f2830da4d3422b54b63 to before 460284dfb10b207980c6f3f7046e33446ceb38acAffected 5d171050e28f823aeb040f2830da4d3422b54b63 to before 4ef41a7f33ffe1a335e7db7e1564ddc6afad47ccAffected 5d171050e28f823aeb040f2830da4d3422b54b63 to before 6c80f48912b5bd4965352d1a9a989e21743a4a06Affected 5d171050e28f823aeb040f2830da4d3422b54b63 to before 7cebc86481bf16049e266f6774d90f2fd4f8d5d2Affected 5d171050e28f823aeb040f2830da4d3422b54b63 to before 4a24a31826246b15477399febd13292b0c9f0ee9Affected 5d171050e28f823aeb040f2830da4d3422b54b63 to before 8f8771757b130383732195497e47fba2aba76d3aAffected 5d171050e28f823aeb040f2830da4d3422b54b63 to before d81ffb87aaa75f842cd7aa57091810353755b3e6Affected
LinuxLinux	4.14Affected before 4.14Not affected 4.14.331 through 4.14.Not affected 4.19.300 through 4.19.Not affected 5.4.262 through 5.4.Not affected 5.10.202 through 5.10.Not affected 5.15.140 through 5.15.Not affected 6.1.64 through 6.1.Not affected 6.5.13 through 6.5.Not affected 6.6.3 through 6.6.Not affected 6.7 and laterNot affected

Product

Versions

LinuxLinux

5d171050e28f823aeb040f2830da4d3422b54b63 to before 38cd56fc9de78bf3c878790785e8c231116ef9d3Affected
5d171050e28f823aeb040f2830da4d3422b54b63 to before 909963e0c16778cec28efb1affc21558825f4200Affected
5d171050e28f823aeb040f2830da4d3422b54b63 to before 460284dfb10b207980c6f3f7046e33446ceb38acAffected
5d171050e28f823aeb040f2830da4d3422b54b63 to before 4ef41a7f33ffe1a335e7db7e1564ddc6afad47ccAffected
5d171050e28f823aeb040f2830da4d3422b54b63 to before 6c80f48912b5bd4965352d1a9a989e21743a4a06Affected
5d171050e28f823aeb040f2830da4d3422b54b63 to before 7cebc86481bf16049e266f6774d90f2fd4f8d5d2Affected
5d171050e28f823aeb040f2830da4d3422b54b63 to before 4a24a31826246b15477399febd13292b0c9f0ee9Affected
5d171050e28f823aeb040f2830da4d3422b54b63 to before 8f8771757b130383732195497e47fba2aba76d3aAffected
5d171050e28f823aeb040f2830da4d3422b54b63 to before d81ffb87aaa75f842cd7aa57091810353755b3e6Affected

LinuxLinux

4.14Affected
before 4.14Not affected
4.14.331 through 4.14.*Not affected
4.19.300 through 4.19.*Not affected
5.4.262 through 5.4.*Not affected
5.10.202 through 5.10.*Not affected
5.15.140 through 5.15.*Not affected
6.1.64 through 6.1.*Not affected
6.5.13 through 6.5.*Not affected
6.6.3 through 6.6.*Not affected
6.7 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.