NetSight
medium5.5

CVE-2023-52789

In the Linux kernel, the following vulnerability has been resolved: tty: vcc: Add check for kstrdup() in vcc_probe() Add check for the return value of kstrdup(…

Impact

In the Linux kernel, the following vulnerability has been resolved: tty: vcc: Add check for kstrdup() in vcc_probe() Add check for the return value of kstrdup() and return the error, if it fails in order to avoid NULL pointer dereference.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 4.14.331
from 4.15 before 4.19.300
from 4.20 before 5.4.262
from 5.5 before 5.10.202
from 5.11 before 5.15.140
from 5.16 before 6.1.64

Weakness classification

References