Vulnerability identifier: #VU90854

Vulnerability risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-52754

CWE-ID: CWE-20

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor: Linux Foundation

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the imon_probe() function in drivers/media/rc/imon.c. A local user can perform a denial of service (DoS) attack.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Linux kernel:

---

External links
http://git.kernel.org/stable/c/0f5068519f89d928d6c51100e4b274479123829f
http://git.kernel.org/stable/c/5e0b788fb96be36d1baf1a5c88d09c7c82a0452a
http://git.kernel.org/stable/c/b083aaf5db2eeca9e362723258e5d8698f7dd84e
http://git.kernel.org/stable/c/10ec5a97f8f5a772a1a42b4eb27196b447cd3aa9
http://git.kernel.org/stable/c/2a493a34bd6e496c55fabedd82b957193ace178f
http://git.kernel.org/stable/c/a1766a4fd83befa0b34d932d532e7ebb7fab1fa7

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.