Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2023-52494
PUBLISHED
More InfoOfficial Page
Assigner-Linux
Assigner Org ID-416baaa9-dc9f-4396-8d5f-8c081fb06d67
View Known Exploited Vulnerability (KEV) details
Published At-29 Feb, 2024 | 15:52
Updated At-24 Jul, 2026 | 14:33
Rejected At-
▼CVE Numbering Authority (CNA)
bus: mhi: host: Add alignment check for event ring read pointer

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Add alignment check for event ring read pointer Though we do check the event ring read pointer by "is_valid_ring_ptr" to make sure it is in the buffer range, but there is another risk the pointer may be not aligned. Since we are expecting event ring elements are 128 bits(struct mhi_ring_element) aligned, an unaligned read pointer could lead to multiple issues like DoS or ring buffer memory corruption. So add a alignment check for event ring read pointer.

Affected Products
Vendor
Linux Kernel Organization, IncLinux
Product
Linux
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Program Files
  • drivers/bus/mhi/host/main.c
Default Status
unaffected
Versions
Affected
  • From a1d2bd164c1c78f87968b7883964175ec41c32ae before 76ed0c6f6418cec6efe6f65a0b91f84be80b72eb (git)
  • From ec32332df7645e0ba463a08d483fe97665167071 before 94991728c84f8df54fd9eec9b85855ef9057ea08 (git)
  • From ec32332df7645e0ba463a08d483fe97665167071 before 2df39ac8f813860f79782807c3f7acff40b3c551 (git)
  • From ec32332df7645e0ba463a08d483fe97665167071 before a9ebfc405fe1be145f414eafadcbf09506082010 (git)
  • From ec32332df7645e0ba463a08d483fe97665167071 before ecf8320111822a1ae5d5fc512953eab46d543d0b (git)
  • From ec32332df7645e0ba463a08d483fe97665167071 before eff9704f5332a13b08fbdbe0f84059c9e7051d5f (git)
  • fd5f40fc887485a8b9a6806a640a0d8e0ef1afb6 (git)
  • 76879a980cd5ede4cb9a638999fb80d37bc09db5 (git)
  • From 5.10.36 before 5.10.261 (semver)
  • From 5.11.20 before 5.12 (semver)
  • From 5.12.3 before 5.13 (semver)
Vendor
Linux Kernel Organization, IncLinux
Product
Linux
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Program Files
  • drivers/bus/mhi/host/main.c
Default Status
affected
Versions
Affected
  • 5.13
Unaffected
  • From 0 before 5.13 (semver)
  • From 5.10.261 through 5.10.* (semver)
  • From 5.15.149 through 5.15.* (semver)
  • From 6.1.76 through 6.1.* (semver)
  • From 6.6.15 through 6.6.* (semver)
  • From 6.7.3 through 6.7.* (semver)
  • From 6.8 through * (original_commit_for_fix)
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
https://git.kernel.org/stable/c/76ed0c6f6418cec6efe6f65a0b91f84be80b72eb
N/A
https://git.kernel.org/stable/c/94991728c84f8df54fd9eec9b85855ef9057ea08
N/A
https://git.kernel.org/stable/c/2df39ac8f813860f79782807c3f7acff40b3c551
N/A
https://git.kernel.org/stable/c/a9ebfc405fe1be145f414eafadcbf09506082010
N/A
https://git.kernel.org/stable/c/ecf8320111822a1ae5d5fc512953eab46d543d0b
N/A
https://git.kernel.org/stable/c/eff9704f5332a13b08fbdbe0f84059c9e7051d5f
N/A
Hyperlink: https://git.kernel.org/stable/c/76ed0c6f6418cec6efe6f65a0b91f84be80b72eb
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/94991728c84f8df54fd9eec9b85855ef9057ea08
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/2df39ac8f813860f79782807c3f7acff40b3c551
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/a9ebfc405fe1be145f414eafadcbf09506082010
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/ecf8320111822a1ae5d5fc512953eab46d543d0b
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/eff9704f5332a13b08fbdbe0f84059c9e7051d5f
Resource: N/A
▼Authorized Data Publishers (ADP)
1. CISA ADP Vulnrichment
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
2. CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
https://git.kernel.org/stable/c/94991728c84f8df54fd9eec9b85855ef9057ea08
x_transferred
https://git.kernel.org/stable/c/2df39ac8f813860f79782807c3f7acff40b3c551
x_transferred
https://git.kernel.org/stable/c/a9ebfc405fe1be145f414eafadcbf09506082010
x_transferred
https://git.kernel.org/stable/c/ecf8320111822a1ae5d5fc512953eab46d543d0b
x_transferred
https://git.kernel.org/stable/c/eff9704f5332a13b08fbdbe0f84059c9e7051d5f
x_transferred
Hyperlink: https://git.kernel.org/stable/c/94991728c84f8df54fd9eec9b85855ef9057ea08
Resource:
x_transferred
Hyperlink: https://git.kernel.org/stable/c/2df39ac8f813860f79782807c3f7acff40b3c551
Resource:
x_transferred
Hyperlink: https://git.kernel.org/stable/c/a9ebfc405fe1be145f414eafadcbf09506082010
Resource:
x_transferred
Hyperlink: https://git.kernel.org/stable/c/ecf8320111822a1ae5d5fc512953eab46d543d0b
Resource:
x_transferred
Hyperlink: https://git.kernel.org/stable/c/eff9704f5332a13b08fbdbe0f84059c9e7051d5f
Resource:
x_transferred
Details not found