CVE-2023-52494
bus: mhi: host: Add alignment check for event ring read pointer
Description
In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Add alignment check for event ring read pointer Though we do check the event ring read pointer by "is_valid_ring_ptr" to make sure it is in the buffer range, but there is another risk the pointer may be not aligned. Since we are expecting event ring elements are 128 bits(struct mhi_ring_element) aligned, an unaligned read pointer could lead to multiple issues like DoS or ring buffer memory corruption. So add a alignment check for event ring read pointer.
INFO
Published Date :
March 11, 2024, 6:15 p.m.
Last Modified :
Feb. 14, 2025, 4:41 p.m.
Remotely Exploit :
No
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
CVSS Scores
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS 3.1 | HIGH | [email protected] |
Solution
- Update the Linux kernel package to a patched version.
- Reboot the system to apply the kernel update.
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2023-52494.
| URL | Resource |
|---|---|
| https://git.kernel.org/stable/c/2df39ac8f813860f79782807c3f7acff40b3c551 | Mailing List Patch |
| https://git.kernel.org/stable/c/94991728c84f8df54fd9eec9b85855ef9057ea08 | Mailing List Patch |
| https://git.kernel.org/stable/c/a9ebfc405fe1be145f414eafadcbf09506082010 | Mailing List Patch |
| https://git.kernel.org/stable/c/ecf8320111822a1ae5d5fc512953eab46d543d0b | Mailing List Patch |
| https://git.kernel.org/stable/c/eff9704f5332a13b08fbdbe0f84059c9e7051d5f | Mailing List Patch |
| https://git.kernel.org/stable/c/2df39ac8f813860f79782807c3f7acff40b3c551 | Mailing List Patch |
| https://git.kernel.org/stable/c/94991728c84f8df54fd9eec9b85855ef9057ea08 | Mailing List Patch |
| https://git.kernel.org/stable/c/a9ebfc405fe1be145f414eafadcbf09506082010 | Mailing List Patch |
| https://git.kernel.org/stable/c/ecf8320111822a1ae5d5fc512953eab46d543d0b | Mailing List Patch |
| https://git.kernel.org/stable/c/eff9704f5332a13b08fbdbe0f84059c9e7051d5f | Mailing List Patch |
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2023-52494 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2023-52494
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2023-52494 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2023-52494 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
Initial Analysis by [email protected]
Feb. 14, 2025
Action Type Old Value New Value Added CVSS V3.1 NIST AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Added CWE NIST CWE-787 Added CPE Configuration OR *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.13 up to (excluding) 5.15.149 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.16 up to (excluding) 6.1.76 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.2 up to (excluding) 6.6.15 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.7 up to (excluding) 6.7.3 Changed Reference Type https://git.kernel.org/stable/c/2df39ac8f813860f79782807c3f7acff40b3c551 No Types Assigned https://git.kernel.org/stable/c/2df39ac8f813860f79782807c3f7acff40b3c551 Mailing List, Patch Changed Reference Type https://git.kernel.org/stable/c/2df39ac8f813860f79782807c3f7acff40b3c551 No Types Assigned https://git.kernel.org/stable/c/2df39ac8f813860f79782807c3f7acff40b3c551 Mailing List, Patch Changed Reference Type https://git.kernel.org/stable/c/94991728c84f8df54fd9eec9b85855ef9057ea08 No Types Assigned https://git.kernel.org/stable/c/94991728c84f8df54fd9eec9b85855ef9057ea08 Mailing List, Patch Changed Reference Type https://git.kernel.org/stable/c/94991728c84f8df54fd9eec9b85855ef9057ea08 No Types Assigned https://git.kernel.org/stable/c/94991728c84f8df54fd9eec9b85855ef9057ea08 Mailing List, Patch Changed Reference Type https://git.kernel.org/stable/c/a9ebfc405fe1be145f414eafadcbf09506082010 No Types Assigned https://git.kernel.org/stable/c/a9ebfc405fe1be145f414eafadcbf09506082010 Mailing List, Patch Changed Reference Type https://git.kernel.org/stable/c/a9ebfc405fe1be145f414eafadcbf09506082010 No Types Assigned https://git.kernel.org/stable/c/a9ebfc405fe1be145f414eafadcbf09506082010 Mailing List, Patch Changed Reference Type https://git.kernel.org/stable/c/ecf8320111822a1ae5d5fc512953eab46d543d0b No Types Assigned https://git.kernel.org/stable/c/ecf8320111822a1ae5d5fc512953eab46d543d0b Mailing List, Patch Changed Reference Type https://git.kernel.org/stable/c/ecf8320111822a1ae5d5fc512953eab46d543d0b No Types Assigned https://git.kernel.org/stable/c/ecf8320111822a1ae5d5fc512953eab46d543d0b Mailing List, Patch Changed Reference Type https://git.kernel.org/stable/c/eff9704f5332a13b08fbdbe0f84059c9e7051d5f No Types Assigned https://git.kernel.org/stable/c/eff9704f5332a13b08fbdbe0f84059c9e7051d5f Mailing List, Patch Changed Reference Type https://git.kernel.org/stable/c/eff9704f5332a13b08fbdbe0f84059c9e7051d5f No Types Assigned https://git.kernel.org/stable/c/eff9704f5332a13b08fbdbe0f84059c9e7051d5f Mailing List, Patch -
CVE Modified by af854a3a-2127-422b-91ae-364da2661108
Nov. 21, 2024
Action Type Old Value New Value Added Reference https://git.kernel.org/stable/c/2df39ac8f813860f79782807c3f7acff40b3c551 Added Reference https://git.kernel.org/stable/c/94991728c84f8df54fd9eec9b85855ef9057ea08 Added Reference https://git.kernel.org/stable/c/a9ebfc405fe1be145f414eafadcbf09506082010 Added Reference https://git.kernel.org/stable/c/ecf8320111822a1ae5d5fc512953eab46d543d0b Added Reference https://git.kernel.org/stable/c/eff9704f5332a13b08fbdbe0f84059c9e7051d5f -
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
May. 28, 2024
Action Type Old Value New Value -
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
May. 14, 2024
Action Type Old Value New Value -
CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Mar. 11, 2024
Action Type Old Value New Value Added Description In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Add alignment check for event ring read pointer Though we do check the event ring read pointer by "is_valid_ring_ptr" to make sure it is in the buffer range, but there is another risk the pointer may be not aligned. Since we are expecting event ring elements are 128 bits(struct mhi_ring_element) aligned, an unaligned read pointer could lead to multiple issues like DoS or ring buffer memory corruption. So add a alignment check for event ring read pointer. Added Reference Linux https://git.kernel.org/stable/c/94991728c84f8df54fd9eec9b85855ef9057ea08 [No types assigned] Added Reference Linux https://git.kernel.org/stable/c/2df39ac8f813860f79782807c3f7acff40b3c551 [No types assigned] Added Reference Linux https://git.kernel.org/stable/c/a9ebfc405fe1be145f414eafadcbf09506082010 [No types assigned] Added Reference Linux https://git.kernel.org/stable/c/ecf8320111822a1ae5d5fc512953eab46d543d0b [No types assigned] Added Reference Linux https://git.kernel.org/stable/c/eff9704f5332a13b08fbdbe0f84059c9e7051d5f [No types assigned]