cvelistv5 - cve-2023-52820

cve-2023-52820

Vulnerability from cvelistv5

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

{
  "containers": {
    "cna": {
      "providerMetadata": {
        "dateUpdated": "2024-05-24T15:26:37.788Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "rejectedReasons": [
        {
          "lang": "en",
          "value": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-52820",
    "datePublished": "2024-05-21T15:31:26.238Z",
    "dateRejected": "2024-05-24T15:26:37.788Z",
    "dateReserved": "2024-05-21T15:19:24.249Z",
    "dateUpdated": "2024-05-24T15:26:37.788Z",
    "state": "REJECTED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2023-52820\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-05-21T16:15:19.980\",\"lastModified\":\"2024-05-24T16:15:09.313\",\"vulnStatus\":\"Rejected\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.\"}],\"metrics\":{},\"references\":[]}}"
  }
}

ghsa-xpvv-4m5x-c33r

Vulnerability from github

Published

2024-05-21 18:31

Modified

2024-05-21 18:31

Details

In the Linux kernel, the following vulnerability has been resolved:

drm_lease.c: copy user-array safely

Currently, there is no overflow-check with memdup_user().

Use the new function memdup_array_user() instead of memdup_user() for duplicating the user-space array safely.

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2023-52820"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-05-21T16:15:19Z",
    "severity": null
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm_lease.c: copy user-array safely\n\nCurrently, there is no overflow-check with memdup_user().\n\nUse the new function memdup_array_user() instead of memdup_user() for\nduplicating the user-space array safely.",
  "id": "GHSA-xpvv-4m5x-c33r",
  "modified": "2024-05-21T18:31:21Z",
  "published": "2024-05-21T18:31:21Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-52820"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/0f5f56745188b06f13509e5054231cb7a4cb047d"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/301e597e7b81efa307dd0969ff8f2af9d7b9064e"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/ea42bc330723644a0bd01d7124a601ab60b27747"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/f37d63e219c39199a59b8b8a211412ff27192830"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

wid-sec-w-2024-1197

Vulnerability from csaf_certbund

Published

2024-05-21 22:00

Modified

2024-12-04 23:00

Summary

Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service und unspezifische Angriffe

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung

Der Kernel stellt den Kern des Linux Betriebssystems dar.

Angriff

Ein lokaler Angreifer kann mehrere Schwachstellen im Linux-Kernel ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen oder unspezifische Angriffe durchzuführen.

Betroffene Betriebssysteme

- Linux