CVE-2023-52494
highpriority · track · 31EPSS 0.003 · 21 %ileDEEURUUSEPSS · scored 2026-10-26
In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Add alignment check for event ring read pointer Though we do check the event ring read pointer by "is_valid_ring_ptr" to make sure it is in the buffer range, but there is another risk the pointer may be not aligned. Since we are expecting event ring elements are 128 bits(struct mhi_ring_element) aligned, an unaligned read pointer could lead to multiple issues like DoS or ring buffer memory corruption. So add a alignment check for event ring read pointer.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 5.5–7.8
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (76)
Products and version ranges known to be affected.
advisories (1)
Vendor and ecosystem advisories describing this.
- WID-SEC-W-2024-0527Linux Kernel: Mehrere SchwachstellenDeutsch2024-02-29csaf · cert_bundDE
Ein lokaler Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial of Service Zustand zu verursachen und einen nicht näher spezifizierten Angriff durchzuführen.
also known as (4)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (18)
External citations — patches, advisories, analysis.
- https://cxsecurity.com/cveshow/CVE-2023-52494/cnnvd
- https://git.kernel.org/stable/c/2df39ac8f813860f79782807c3f7acff40b3c551cnnvd
- https://git.kernel.org/stable/c/94991728c84f8df54fd9eec9b85855ef9057ea08cnnvd
- https://git.kernel.org/stable/c/a9ebfc405fe1be145f414eafadcbf09506082010cnnvd
- https://git.kernel.org/stable/c/ecf8320111822a1ae5d5fc512953eab46d543d0bcnnvd
- https://git.kernel.org/stable/c/eff9704f5332a13b08fbdbe0f84059c9e7051d5fcnnvd
- https://git.kernel.org/stable/c/2df39ac8f813860f79782807c3f7acff40b3c551enisa_euvd
- https://git.kernel.org/stable/c/76ed0c6f6418cec6efe6f65a0b91f84be80b72ebenisa_euvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan