CVE-2023-52764: media: gspca: cpia1: shift-out-of-bounds in set_flicker
In the Linux kernel, the following vulnerability has been resolved:
media: gspca: cpia1: shift-out-of-bounds in setflicker
Syzkaller reported the following issue: UBSAN: shift-out-of-bounds in drivers/media/usb/gspca/cpia1.c:1031:27 shift exponent 245 is too large for 32-bit type 'int'
When the value of the variable "sd->params.exposure.gain" exceeds the number of bits in an integer, a shift-out-of-bounds error is reported. It is triggered because the variable "currentexp" cannot be left-shifted by more than the number of bits in an integer. In order to avoid invalid range during left-shift, the conditional expression is added.
Other sources
In the Linux kernel, the following vulnerability has been resolved:
media: gspca: cpia1: shift-out-of-bounds in setflicker
The Linux kernel CVE team has assigned CVE-2023-52764 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024052148-CVE-2023-52764-fa3b@gregkh/T
— Red Hat
Linux Kernel is vulnerable to a denial of service, caused by a shift-out-of-bounds in setflicker. A local authenticated attacker could exploit this vulnerability to cause a denial of service.
— IBM
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52764?
CVE-2023-52764 is a vulnerability in the Linux kernel categorized as a shift-out-of-bounds issue.
How do I fix CVE-2023-52764?
To fix CVE-2023-52764, update the kernel to one of the following versions: 4.14.331, 4.19.300, 5.4.262, 5.10.202, 5.15.140, 6.1.64, 6.5.13, 6.6.3, or 6.7.
Which software is affected by CVE-2023-52764?
CVE-2023-52764 affects the Linux kernel and several versions of IBM Security Verify Governance products.
What is the impact of CVE-2023-52764 in the kernel?
The impact of CVE-2023-52764 is a potential denial-of-service or possible escalation of privileges due to a shift-out-of-bounds condition.
Is CVE-2023-52764 being actively exploited?
As of now, there are no public reports indicating that CVE-2023-52764 is being actively exploited in the wild.