CVE - CVE-2023-52764

CVE-ID
CVE-2023-52764	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: media: gspca: cpia1: shift-out-of-bounds in set_flicker Syzkaller reported the following issue: UBSAN: shift-out-of-bounds in drivers/media/usb/gspca/cpia1.c:1031:27 shift exponent 245 is too large for 32-bit type 'int' When the value of the variable "sd->params.exposure.gain" exceeds the number of bits in an integer, a shift-out-of-bounds error is reported. It is triggered because the variable "currentexp" cannot be left-shifted by more than the number of bits in an integer. In order to avoid invalid range during left-shift, the conditional expression is added.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/099be1822d1f095433f4b08af9cc9d6308ec1953 URL:https://git.kernel.org/stable/c/099be1822d1f095433f4b08af9cc9d6308ec1953 MISC:https://git.kernel.org/stable/c/09cd8b561aa9796903710a1046957f2b112c8f26 URL:https://git.kernel.org/stable/c/09cd8b561aa9796903710a1046957f2b112c8f26 MISC:https://git.kernel.org/stable/c/2eee8edfff90e22980a6b22079d238c3c9d323bb URL:https://git.kernel.org/stable/c/2eee8edfff90e22980a6b22079d238c3c9d323bb MISC:https://git.kernel.org/stable/c/69bba62600bd91d6b7c1e8ca181faf8ac64f7060 URL:https://git.kernel.org/stable/c/69bba62600bd91d6b7c1e8ca181faf8ac64f7060 MISC:https://git.kernel.org/stable/c/8f83c85ee88225319c52680792320c02158c2a9b URL:https://git.kernel.org/stable/c/8f83c85ee88225319c52680792320c02158c2a9b MISC:https://git.kernel.org/stable/c/93bddd6529f187f510eec759f37d0569243c9809 URL:https://git.kernel.org/stable/c/93bddd6529f187f510eec759f37d0569243c9809 MISC:https://git.kernel.org/stable/c/a647f27a7426d2fe1b40da7c8fa2b81354a51177 URL:https://git.kernel.org/stable/c/a647f27a7426d2fe1b40da7c8fa2b81354a51177 MISC:https://git.kernel.org/stable/c/c6b6b8692218da73b33b310d7c1df90f115bdd9a URL:https://git.kernel.org/stable/c/c6b6b8692218da73b33b310d7c1df90f115bdd9a MISC:https://git.kernel.org/stable/c/e2d7149b913d14352c82624e723ce1c211ca06d3 URL:https://git.kernel.org/stable/c/e2d7149b913d14352c82624e723ce1c211ca06d3
Assigning CNA
kernel.org
Date Record Created
20240521	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240521)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)