CVE-2023-52565: media: uvcvideo: Fix OOB read
In the Linux kernel, the following vulnerability has been resolved:
media: uvcvideo: Fix OOB read
If the index provided by the user is bigger than the mask size, we might do an out of bound read.
Other sources
In the Linux kernel, the following vulnerability has been resolved:
media: uvcvideo: Fix OOB read
The Linux kernel CVE team has assigned CVE-2023-52565 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024030254-CVE-2023-52565-07ce@gregkh/
— Red Hat
Linux Kernel could allow a local authenticated attacker to obtain sensitive information, caused by an out-of-bounds read. By sending a specially crafted request, n attacker could exploit this vulnerability to obtain sensitive information.
— IBM
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52565?
The severity of CVE-2023-52565 is classified as moderate due to the potential for an out-of-bounds read in the Linux kernel uvcvideo driver.
How do I fix CVE-2023-52565?
To fix CVE-2023-52565, update the Linux kernel to version 6.1.56, 6.5.6, or 6.6 or later.
What software is affected by CVE-2023-52565?
CVE-2023-52565 affects specific versions of the Linux kernel as well as IBM Security Verify Governance identity management products up to version 10.0.2.
Is CVE-2023-52565 exploitable remotely?
CVE-2023-52565 may not be directly exploitable remotely as it involves a local user interaction with the vulnerable kernel module.
What should I do if my system is vulnerable to CVE-2023-52565?
If your system is vulnerable to CVE-2023-52565, immediately apply the necessary kernel updates to mitigate the risk.