CVE-2023-52871

soc: qcom: llcc: Handle a second device without data corruption

State: Published
Severity: 7.1 High
Published: May 21, 2024
Updated: Aug 5, 2026
Reserved: May 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

soc: qcom: llcc: Handle a second device without data corruption

Usually there is only one llcc device. But if there were a second, even a failed probe call would modify the global drv_data pointer. So check if drv_data is valid before overwriting it.

Scores

CVSS	Score	Vector	Source
3.1	7.1 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	a3134fb09e0bc5bee76e13bf863173b86f21cf87 to before cc1a1dcb411fe224f48553cfdcdfe6e61395b69cAffected a3134fb09e0bc5bee76e13bf863173b86f21cf87 to before 5e5b85ea0f4bc484bfe4cc73ead51fa48d2366a0Affected a3134fb09e0bc5bee76e13bf863173b86f21cf87 to before 995ee1e84e8db7fa5dcdde7dfe0bd7bb6f9bbb8cAffected a3134fb09e0bc5bee76e13bf863173b86f21cf87 to before f0ef883cae309bc5e8cdfcdbc1b4822732ce20a8Affected a3134fb09e0bc5bee76e13bf863173b86f21cf87 to before 3565684309e54fa998ea27f37028d67cc3e1dff2Affected a3134fb09e0bc5bee76e13bf863173b86f21cf87 to before 1143bfb9b055897975aeaea254da148e19524493Affected a3134fb09e0bc5bee76e13bf863173b86f21cf87 to before f1a1bc8775b26345aba2be278118999e7f661d3dAffected
LinuxLinux	4.19Affected before 4.19Not affected 5.4.261 through 5.4.Not affected 5.10.201 through 5.10.Not affected 5.15.139 through 5.15.Not affected 6.1.63 through 6.1.Not affected 6.5.12 through 6.5.Not affected 6.6.2 through 6.6.Not affected 6.7 and laterNot affected

Product

Versions

LinuxLinux

a3134fb09e0bc5bee76e13bf863173b86f21cf87 to before cc1a1dcb411fe224f48553cfdcdfe6e61395b69cAffected
a3134fb09e0bc5bee76e13bf863173b86f21cf87 to before 5e5b85ea0f4bc484bfe4cc73ead51fa48d2366a0Affected
a3134fb09e0bc5bee76e13bf863173b86f21cf87 to before 995ee1e84e8db7fa5dcdde7dfe0bd7bb6f9bbb8cAffected
a3134fb09e0bc5bee76e13bf863173b86f21cf87 to before f0ef883cae309bc5e8cdfcdbc1b4822732ce20a8Affected
a3134fb09e0bc5bee76e13bf863173b86f21cf87 to before 3565684309e54fa998ea27f37028d67cc3e1dff2Affected
a3134fb09e0bc5bee76e13bf863173b86f21cf87 to before 1143bfb9b055897975aeaea254da148e19524493Affected
a3134fb09e0bc5bee76e13bf863173b86f21cf87 to before f1a1bc8775b26345aba2be278118999e7f661d3dAffected

LinuxLinux

4.19Affected
before 4.19Not affected
5.4.261 through 5.4.*Not affected
5.10.201 through 5.10.*Not affected
5.15.139 through 5.15.*Not affected
6.1.63 through 6.1.*Not affected
6.5.12 through 6.5.*Not affected
6.6.2 through 6.6.*Not affected
6.7 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.