CVE - CVE-2023-52494

CVE-ID
CVE-2023-52494	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Add alignment check for event ring read pointer Though we do check the event ring read pointer by "is_valid_ring_ptr" to make sure it is in the buffer range, but there is another risk the pointer may be not aligned. Since we are expecting event ring elements are 128 bits(struct mhi_ring_element) aligned, an unaligned read pointer could lead to multiple issues like DoS or ring buffer memory corruption. So add a alignment check for event ring read pointer.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/2df39ac8f813860f79782807c3f7acff40b3c551 URL:https://git.kernel.org/stable/c/2df39ac8f813860f79782807c3f7acff40b3c551 MISC:https://git.kernel.org/stable/c/94991728c84f8df54fd9eec9b85855ef9057ea08 URL:https://git.kernel.org/stable/c/94991728c84f8df54fd9eec9b85855ef9057ea08 MISC:https://git.kernel.org/stable/c/a9ebfc405fe1be145f414eafadcbf09506082010 URL:https://git.kernel.org/stable/c/a9ebfc405fe1be145f414eafadcbf09506082010 MISC:https://git.kernel.org/stable/c/ecf8320111822a1ae5d5fc512953eab46d543d0b URL:https://git.kernel.org/stable/c/ecf8320111822a1ae5d5fc512953eab46d543d0b MISC:https://git.kernel.org/stable/c/eff9704f5332a13b08fbdbe0f84059c9e7051d5f URL:https://git.kernel.org/stable/c/eff9704f5332a13b08fbdbe0f84059c9e7051d5f
Assigning CNA
kernel.org
Date Record Created
20240220	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240220)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)