CVE-2023-52495

    Dashboard / Vulnerabilities / CVE-2023-52495

    CVE-2023-52495

    Published: 29 Feb 2024Last Modified: 12 Aug 2026

    Summary: soc: qcom: pmic_glink_altmode: fix port sanity check

    Details: In the Linux kernel, the following vulnerability has been resolved: soc: qcom: pmic_glink_altmode: fix port sanity check The PMIC GLINK altmode driver currently supports at most two ports. Fix the incomplete port sanity check on notifications to avoid accessing and corrupting memory beyond the port array if we ever get a notification for an unsupported port.

    References: https://git.kernel.org/stable/c/532a5557da6892a6b2d5793052e1bce1f4c9e177, https://git.kernel.org/stable/c/c4fb7d2eac9ff9bfc35a2e4d40c7169a332416e0, https://git.kernel.org/stable/c/d26edf4ee3672cc9828f2a3ffae34086a712574d, https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52495.json, https://nvd.nist.gov/vuln/detail/CVE-2023-52495, https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 080b4e24852b1d5b66929f69344e6c3eeb963941
    Fixed -532a5557da6892a6b2d5793052e1bce1f4c9e177

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2023-52495 | CVE-DB