CVE-2023-53437

media: uvcvideo: Handle cameras with invalid descriptors

State: Published
Severity: 5.5 Medium
Published: Sep 18, 2025
Updated: May 23, 2026
Reserved: Sep 17, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

media: uvcvideo: Handle cameras with invalid descriptors

If the source entity does not contain any pads, do not create a link.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	6d30cf81ee3c0368175f76c03120af5d81e0c639 to before c8f4a424af5879baefb0fb8a8a09b09ea1779483Affected b4759a52b8940dbbfc565c918a3893ecaeb5b134 to before 2914259fcea23971c6fed8b2618d3a729a78c365Affected aa1362606059ade437a901fe7c33b24901683c14 to before 4e4e6ca62e77539d4df8d13137e2683b10baddd9Affected cc52ed14f5ca849ef81e6a6bc4beea6dc43514d0 to before d8aa2e1ae6426d7cbddf1735aed1a63ddf0e6909Affected 7532dad6634031d083df7af606fac655b8d08b5c to before 31a8d11d28b57656cebfbd4c0b8b76f6ad5b017dAffected 7532dad6634031d083df7af606fac655b8d08b5c to before 11196ee3916e50a5da3c1e6ecda19a02dca14ba3Affected 7532dad6634031d083df7af606fac655b8d08b5c to before 1a76cfc388cf105d3e04ac592670a52a3864b1baAffected 7532dad6634031d083df7af606fac655b8d08b5c to before 41ddb251c68ac75c101d3a50a68c4629c9055e4cAffected 9bf5da0d0fcca080b2254a30fa4b8ed47a96a0d0Affected d920b0940a0b2c0671e5a69ed3b3fe3a3a50b970Affected b950d6d8f4d7c78c9e5d08b61a66387c0b61f924Affected 4.14.224 to before 4.14.308Affected 4.19.179 to before 4.19.276Affected 5.4.103 to before 5.4.235Affected 5.10.21 to before 5.10.173Affected 4.4.260 to before 4.5Affected 4.9.260 to before 4.10Affected 5.11.4 to before 5.12Affected
LinuxLinux	5.12Affected before 5.12Not affected 4.14.308 through 4.14.Not affected 4.19.276 through 4.19.Not affected 5.4.235 through 5.4.Not affected 5.10.173 through 5.10.Not affected 5.15.100 through 5.15.Not affected 6.1.18 through 6.1.Not affected 6.2.5 through 6.2.*Not affected 6.3 and laterNot affected

Product

Versions

LinuxLinux

6d30cf81ee3c0368175f76c03120af5d81e0c639 to before c8f4a424af5879baefb0fb8a8a09b09ea1779483Affected
b4759a52b8940dbbfc565c918a3893ecaeb5b134 to before 2914259fcea23971c6fed8b2618d3a729a78c365Affected
aa1362606059ade437a901fe7c33b24901683c14 to before 4e4e6ca62e77539d4df8d13137e2683b10baddd9Affected
cc52ed14f5ca849ef81e6a6bc4beea6dc43514d0 to before d8aa2e1ae6426d7cbddf1735aed1a63ddf0e6909Affected
7532dad6634031d083df7af606fac655b8d08b5c to before 31a8d11d28b57656cebfbd4c0b8b76f6ad5b017dAffected
7532dad6634031d083df7af606fac655b8d08b5c to before 11196ee3916e50a5da3c1e6ecda19a02dca14ba3Affected
7532dad6634031d083df7af606fac655b8d08b5c to before 1a76cfc388cf105d3e04ac592670a52a3864b1baAffected
7532dad6634031d083df7af606fac655b8d08b5c to before 41ddb251c68ac75c101d3a50a68c4629c9055e4cAffected
9bf5da0d0fcca080b2254a30fa4b8ed47a96a0d0Affected
d920b0940a0b2c0671e5a69ed3b3fe3a3a50b970Affected
b950d6d8f4d7c78c9e5d08b61a66387c0b61f924Affected
4.14.224 to before 4.14.308Affected
4.19.179 to before 4.19.276Affected
5.4.103 to before 5.4.235Affected
5.10.21 to before 5.10.173Affected
4.4.260 to before 4.5Affected
4.9.260 to before 4.10Affected
5.11.4 to before 5.12Affected

LinuxLinux

5.12Affected
before 5.12Not affected
4.14.308 through 4.14.*Not affected
4.19.276 through 4.19.*Not affected
5.4.235 through 5.4.*Not affected
5.10.173 through 5.10.*Not affected
5.15.100 through 5.15.*Not affected
6.1.18 through 6.1.*Not affected
6.2.5 through 6.2.*Not affected
6.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.