CVE-2023-52512

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2023-52512

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-52512.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2023-52512

Downstream

BELL-CVE-2023-52512

DEBIAN-CVE-2023-52512

UBUNTU-CVE-2023-52512

Published

2024-03-02T21:52:23.932Z

Modified

2026-02-13T10:26:32.433990Z

Severity

5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

pinctrl: nuvoton: wpcm450: fix out of bounds write

Details

In the Linux kernel, the following vulnerability has been resolved:

pinctrl: nuvoton: wpcm450: fix out of bounds write

Write into 'pctrl->gpio_bank' happens before the check for GPIO index validity, so out of bounds write may happen.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Database specific

{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52512.json"
}

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

a1d1e0e3d80a870cc37a6c064994b89e963d2b58

Fixed

6c18c386fd13dbb3ff31a1086dabb526780d9bda

Fixed

c9d7cac0fd27c74dd368e80dc4b5d0f9f2e13cf8

Fixed

87d315a34133edcb29c4cadbf196ec6c30dfd47b

Affected versions

v5.*

v5.17

v5.17-rc2

v5.17-rc3

v5.17-rc4

v5.17-rc5

v5.17-rc6

v5.17-rc7

v5.17-rc8

v5.18

v5.18-rc1

v5.18-rc2

v5.18-rc3

v5.18-rc4

v5.18-rc5

v5.18-rc6

v5.18-rc7

v5.19

v5.19-rc1

v5.19-rc2

v5.19-rc3

v5.19-rc4

v5.19-rc5

v5.19-rc6

v5.19-rc7

v5.19-rc8

v6.*

v6.0

v6.0-rc1

v6.0-rc2

v6.0-rc3

v6.0-rc4

v6.0-rc5

v6.0-rc6

v6.0-rc7

v6.1

v6.1-rc1

v6.1-rc2

v6.1-rc3

v6.1-rc4

v6.1-rc5

v6.1-rc6

v6.1-rc7

v6.1-rc8

v6.1.1

v6.1.10

v6.1.11

v6.1.12

v6.1.13

v6.1.14

v6.1.15

v6.1.16

v6.1.17

v6.1.18

v6.1.19

v6.1.2

v6.1.20

v6.1.21

v6.1.22

v6.1.23

v6.1.24

v6.1.25

v6.1.26

v6.1.27

v6.1.28

v6.1.29

v6.1.3

v6.1.30

v6.1.31

v6.1.32

v6.1.33

v6.1.34

v6.1.35

v6.1.36

v6.1.37

v6.1.38

v6.1.39

v6.1.4

v6.1.40

v6.1.41

v6.1.42

v6.1.43

v6.1.44

v6.1.45

v6.1.46

v6.1.47

v6.1.48

v6.1.49

v6.1.5

v6.1.50

v6.1.51

v6.1.52

v6.1.53

v6.1.54

v6.1.55

v6.1.56

v6.1.57

v6.1.58

v6.1.6

v6.1.7

v6.1.8

v6.1.9

v6.2

v6.2-rc1

v6.2-rc2

v6.2-rc3

v6.2-rc4

v6.2-rc5

v6.2-rc6

v6.2-rc7

v6.2-rc8

v6.3

v6.3-rc1

v6.3-rc2

v6.3-rc3

v6.3-rc4

v6.3-rc5

v6.3-rc6

v6.3-rc7

v6.4

v6.4-rc1

v6.4-rc2

v6.4-rc3

v6.4-rc4

v6.4-rc5

v6.4-rc6

v6.4-rc7

v6.5

v6.5-rc1

v6.5-rc2

v6.5-rc3

v6.5-rc4

v6.5-rc5

v6.5-rc6

v6.5-rc7

v6.5.1

v6.5.2

v6.5.3

v6.5.4

v6.5.5

v6.5.6

v6.5.7

v6.6-rc1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-52512.json"

vanir_signatures

[
    {
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6c18c386fd13dbb3ff31a1086dabb526780d9bda",
        "digest": {
            "line_hashes": [
                "235384138928024186130512454296788723778",
                "25494042078023586319659365475877133338",
                "197508753142978403388969825743645082168",
                "21286410273131301113053554013643054111",
                "334882393994536931835462169860794989399",
                "333992804279317278351588033662938208717",
                "149428759176763146175642099709997093717",
                "38383596056417986017301590484025210518"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2023-52512-6905646d",
        "deprecated": false,
        "target": {
            "file": "drivers/pinctrl/nuvoton/pinctrl-wpcm450.c"
        }
    },
    {
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6c18c386fd13dbb3ff31a1086dabb526780d9bda",
        "digest": {
            "function_hash": "10722617729342679024659900245384387547",
            "length": 2092.0
        },
        "id": "CVE-2023-52512-8fa4bc77",
        "deprecated": false,
        "target": {
            "file": "drivers/pinctrl/nuvoton/pinctrl-wpcm450.c",
            "function": "wpcm450_gpio_register"
        }
    }
]

Git / github.com/gregkh/linux