CVE-2023-52865
clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
MEDIUM
5.5
CVSS Score
Published: May 21, 2024 at 03:31 PM UTC
Updated: June 17, 2026 at 06:43 AM UTC
1 product affected across 1 vendorLinux Kernel
Using Linux by Linux?
Get instant alerts when new vulnerabilities affect Linux - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.2%
SSVC
No known exploit
Description
In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data Add the check for the return value of mtk_alloc_clk_data() in order to avoid NULL pointer dereference.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
4.12 ≤ v < 4.14.3304.12 ≤ v < 4.19.2994.12 ≤ v < 5.10.2014.12 ≤ v < 5.15.1394.12 ≤ v < 5.4.2614.12 ≤ v < 6.1.634.12 ≤ v < 6.5.124.12 ≤ v < 6.6.24.12 ≤ v < 6.74.15 ≤ v < 4.19.2994.20 ≤ v < 5.4.2615.11 ≤ v < 5.15.1395.16 ≤ v < 6.1.635.5 ≤ v < 5.10.2016.2 ≤ v < 6.5.126.6 ≤ v < 6.6.24.1296596aa06628e86ea0e1c08c34b0ccc7619e43ac
Vendor states this is fixed in 122ac6496e4975ddd7ec1edba4f6fc1e15e39478 (fixed)
Vendor states this is fixed in 2705c5b97f504e831ae1935c05f0e44f80dfa6b3 (fixed)
Vendor states this is fixed in 357df1c2f6ace96defd557fad709ed1f9f70e16c (fixed)
Vendor states this is fixed in 3aefc6fcfbada57fac27f470602d5565e5b76cb4 (fixed)
Vendor states this is fixed in 4c79cbfb8e9e2311be77182893fda5ea4068c836 (fixed)
Vendor states this is fixed in 606f6366a35a3329545e38129804d65ef26ed7d2 (fixed)
Vendor states this is fixed in 81b16286110728674dcf81137be0687c5055e7bf (fixed)
Vendor states this is fixed in be3f12f16038a558f08fa93cc32fa715746a5235 (fixed)
Vendor states this is fixed in c26feedbc561f2a3cee1a4f717e61bdbdfb4fa92 (fixed)
Vendor states this is fixed in 4.12 (unaffected)
Vendor states this is fixed in 4.14.330 (unaffected)
Vendor states this is fixed in 4.19.299 (unaffected)
Vendor states this is fixed in 5.10.201 (unaffected)
Vendor states this is fixed in 5.15.139 (unaffected)
Vendor states this is fixed in 5.4.261 (unaffected)
Vendor states this is fixed in 6.1.63 (unaffected)
Vendor states this is fixed in 6.5.12 (unaffected)
Vendor states this is fixed in 6.6.2 (unaffected)
Vendor states this is fixed in 6.7 (unaffected)
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
- https://git.kernel.org/stable/c/122ac6496e4975ddd7ec1edba4f6fc1e15e39478
- https://git.kernel.org/stable/c/2705c5b97f504e831ae1935c05f0e44f80dfa6b3
- https://git.kernel.org/stable/c/357df1c2f6ace96defd557fad709ed1f9f70e16c
- https://git.kernel.org/stable/c/3aefc6fcfbada57fac27f470602d5565e5b76cb4
- https://git.kernel.org/stable/c/4c79cbfb8e9e2311be77182893fda5ea4068c836
References (9)
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/122ac6496e4975ddd7ec1edba4f6fc1e15e39478Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/2705c5b97f504e831ae1935c05f0e44f80dfa6b3Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/357df1c2f6ace96defd557fad709ed1f9f70e16cPatch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/3aefc6fcfbada57fac27f470602d5565e5b76cb4Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/4c79cbfb8e9e2311be77182893fda5ea4068c836Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/606f6366a35a3329545e38129804d65ef26ed7d2Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/81b16286110728674dcf81137be0687c5055e7bfPatch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/be3f12f16038a558f08fa93cc32fa715746a5235SSVC — Action Prioritization
SSVCNo known exploitNot automatablePartial impact
SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.
CVSS
- Attack Vector
- LOCAL
- Complexity
- LOW
- Privileges
- LOW
- User Interaction
- NONE
- Scope
- UNCHANGED
- Confidentiality
- NONE
- Integrity
- NONE
- Availability
- HIGH
Vector?
Quick Info
StatusANALYZED
CWE
CWE-476
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card