CVE - CVE-2023-52763

CVE-ID
CVE-2023-52763	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: i3c: master: mipi-i3c-hci: Fix a kernel panic for accessing DAT_data. The `i3c_master_bus_init` function may attach the I2C devices before the I3C bus initialization. In this flow, the DAT `alloc_entry`` will be used before the DAT `init`. Additionally, if the `i3c_master_bus_init` fails, the DAT `cleanup` will execute before the device is detached, which will execue DAT `free_entry` function. The above scenario can cause the driver to use DAT_data when it is NULL.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/39c71357e68e2f03766f9321b9f4882e49ff1442 URL:https://git.kernel.org/stable/c/39c71357e68e2f03766f9321b9f4882e49ff1442 MISC:https://git.kernel.org/stable/c/3cb79a365e7cce8f121bba91312e2ddd206b9781 URL:https://git.kernel.org/stable/c/3cb79a365e7cce8f121bba91312e2ddd206b9781 MISC:https://git.kernel.org/stable/c/b53e9758a31c683fc8615df930262192ed5f034b URL:https://git.kernel.org/stable/c/b53e9758a31c683fc8615df930262192ed5f034b MISC:https://git.kernel.org/stable/c/e64d23dc65810be4e3395d72df0c398f60c991f9 URL:https://git.kernel.org/stable/c/e64d23dc65810be4e3395d72df0c398f60c991f9 MISC:https://git.kernel.org/stable/c/eed74230435c61eeb58abaa275b1820e6a4b7f02 URL:https://git.kernel.org/stable/c/eed74230435c61eeb58abaa275b1820e6a4b7f02
Assigning CNA
kernel.org
Date Record Created
20240521	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240521)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)