In the Linux kernel, the following vulnerability has been resolved:
HID: betop: check shape of output reports
betopffinit() only checks the total sum of the report counts for each report field to be at least 4, but hidbetopffplay() expects 4 report fields. A device advertising an output report with one field and 4 report counts would pass the check but crash the kernel with a NULL pointer dereference in hidbetopff_play().
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53015.json"
}"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53015.json"
[
{
"id": "CVE-2023-53015-084cc7e3",
"target": {
"file": "drivers/hid/hid-betopff.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@28fc6095da22dc88433d79578ae1c495ebe8ca43",
"digest": {
"threshold": 0.9,
"line_hashes": [
"124720138848539547514160111283128639140",
"219704720901358285722881208669644565155",
"182926550039441961649502300273365584983",
"288632757392429841164366062331310485021",
"131634178277185195483269420551321346128",
"318135916158900134627646423243920919970",
"114349386004566707045386233662554313303",
"97581736703476453179795483431790837357",
"13523723990998852640174242288172885161",
"315190061780945559318803786072589954650",
"207121160596177519796982572411263923165",
"159980405616273795445124378697473987960",
"118879042457619231787276517883671934085",
"200535604492226510694251855329608472934",
"79289142831562103732556457706076327532",
"319639368917556073207693174336286522589",
"293728087958018176817809425525825098752",
"7555957832749534036983970911977452621"
]
},
"signature_type": "Line"
},
{
"id": "CVE-2023-53015-1c881e52",
"target": {
"function": "betopff_init",
"file": "drivers/hid/hid-betopff.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@07bc32e53c7bd5c91472cc485231ef6274db9b76",
"digest": {
"function_hash": "222436054704841435722622360666428458620",
"length": 1229.0
},
"signature_type": "Function"
},
{
"id": "CVE-2023-53015-1f6f1dff",
"target": {
"function": "betopff_init",
"file": "drivers/hid/hid-betopff.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@28fc6095da22dc88433d79578ae1c495ebe8ca43",
"digest": {
"function_hash": "222436054704841435722622360666428458620",
"length": 1229.0
},
"signature_type": "Function"
},
{
"id": "CVE-2023-53015-292577ca",
"target": {
"file": "drivers/hid/hid-betopff.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1a2a47b85cab50a3c146731bfeaf2d860f5344ee",
"digest": {
"threshold": 0.9,
"line_hashes": [
"124720138848539547514160111283128639140",
"219704720901358285722881208669644565155",
"182926550039441961649502300273365584983",
"288632757392429841164366062331310485021",
"131634178277185195483269420551321346128",
"318135916158900134627646423243920919970",
"114349386004566707045386233662554313303",
"97581736703476453179795483431790837357",
"13523723990998852640174242288172885161",
"315190061780945559318803786072589954650",
"207121160596177519796982572411263923165",
"159980405616273795445124378697473987960",
"118879042457619231787276517883671934085",
"200535604492226510694251855329608472934",
"79289142831562103732556457706076327532",
"319639368917556073207693174336286522589",
"293728087958018176817809425525825098752",
"7555957832749534036983970911977452621"
]
},
"signature_type": "Line"
},
{
"id": "CVE-2023-53015-325cdd3e",
"target": {
"file": "drivers/hid/hid-betopff.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@07bc32e53c7bd5c91472cc485231ef6274db9b76",
"digest": {
"threshold": 0.9,
"line_hashes": [
"124720138848539547514160111283128639140",
"219704720901358285722881208669644565155",
"182926550039441961649502300273365584983",
"288632757392429841164366062331310485021",
"131634178277185195483269420551321346128",
"318135916158900134627646423243920919970",
"114349386004566707045386233662554313303",
"97581736703476453179795483431790837357",
"13523723990998852640174242288172885161",
"315190061780945559318803786072589954650",
"207121160596177519796982572411263923165",
"159980405616273795445124378697473987960",
"118879042457619231787276517883671934085",
"200535604492226510694251855329608472934",
"79289142831562103732556457706076327532",
"319639368917556073207693174336286522589",
"293728087958018176817809425525825098752",
"7555957832749534036983970911977452621"
]
},
"signature_type": "Line"
},
{
"id": "CVE-2023-53015-415e6456",
"target": {
"file": "drivers/hid/hid-betopff.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3782c0d6edf658b71354a64d60aa7a296188fc90",
"digest": {
"threshold": 0.9,
"line_hashes": [
"124720138848539547514160111283128639140",
"219704720901358285722881208669644565155",
"182926550039441961649502300273365584983",
"288632757392429841164366062331310485021",
"131634178277185195483269420551321346128",
"318135916158900134627646423243920919970",
"114349386004566707045386233662554313303",
"97581736703476453179795483431790837357",
"13523723990998852640174242288172885161",
"315190061780945559318803786072589954650",
"207121160596177519796982572411263923165",
"159980405616273795445124378697473987960",
"118879042457619231787276517883671934085",
"200535604492226510694251855329608472934",
"79289142831562103732556457706076327532",
"319639368917556073207693174336286522589",
"293728087958018176817809425525825098752",
"7555957832749534036983970911977452621"
]
},
"signature_type": "Line"
},
{
"id": "CVE-2023-53015-5c04a9b3",
"target": {
"function": "betopff_init",
"file": "drivers/hid/hid-betopff.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d3065cc56221d1a5eda237e94eaf2a627b88ab79",
"digest": {
"function_hash": "222436054704841435722622360666428458620",
"length": 1229.0
},
"signature_type": "Function"
},
{
"id": "CVE-2023-53015-763ededf",
"target": {
"file": "drivers/hid/hid-betopff.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d3065cc56221d1a5eda237e94eaf2a627b88ab79",
"digest": {
"threshold": 0.9,
"line_hashes": [
"124720138848539547514160111283128639140",
"219704720901358285722881208669644565155",
"182926550039441961649502300273365584983",
"288632757392429841164366062331310485021",
"131634178277185195483269420551321346128",
"318135916158900134627646423243920919970",
"114349386004566707045386233662554313303",
"97581736703476453179795483431790837357",
"13523723990998852640174242288172885161",
"315190061780945559318803786072589954650",
"207121160596177519796982572411263923165",
"159980405616273795445124378697473987960",
"118879042457619231787276517883671934085",
"200535604492226510694251855329608472934",
"79289142831562103732556457706076327532",
"319639368917556073207693174336286522589",
"293728087958018176817809425525825098752",
"7555957832749534036983970911977452621"
]
},
"signature_type": "Line"
},
{
"id": "CVE-2023-53015-7fd8c1a6",
"target": {
"function": "betopff_init",
"file": "drivers/hid/hid-betopff.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dbab4dba400d6ea9a9697fbbd287adbf7db1dac4",
"digest": {
"function_hash": "222436054704841435722622360666428458620",
"length": 1229.0
},
"signature_type": "Function"
},
{
"id": "CVE-2023-53015-8aa5cef6",
"target": {
"function": "betopff_init",
"file": "drivers/hid/hid-betopff.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7317326f685824c7c29bd80841fd18041af6bb73",
"digest": {
"function_hash": "222436054704841435722622360666428458620",
"length": 1229.0
},
"signature_type": "Function"
},
{
"id": "CVE-2023-53015-9af85f19",
"target": {
"file": "drivers/hid/hid-betopff.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7317326f685824c7c29bd80841fd18041af6bb73",
"digest": {
"threshold": 0.9,
"line_hashes": [
"124720138848539547514160111283128639140",
"219704720901358285722881208669644565155",
"182926550039441961649502300273365584983",
"288632757392429841164366062331310485021",
"131634178277185195483269420551321346128",
"318135916158900134627646423243920919970",
"114349386004566707045386233662554313303",
"97581736703476453179795483431790837357",
"13523723990998852640174242288172885161",
"315190061780945559318803786072589954650",
"207121160596177519796982572411263923165",
"159980405616273795445124378697473987960",
"118879042457619231787276517883671934085",
"200535604492226510694251855329608472934",
"79289142831562103732556457706076327532",
"319639368917556073207693174336286522589",
"293728087958018176817809425525825098752",
"7555957832749534036983970911977452621"
]
},
"signature_type": "Line"
},
{
"id": "CVE-2023-53015-cbd97f3f",
"target": {
"function": "betopff_init",
"file": "drivers/hid/hid-betopff.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3782c0d6edf658b71354a64d60aa7a296188fc90",
"digest": {
"function_hash": "222436054704841435722622360666428458620",
"length": 1229.0
},
"signature_type": "Function"
},
{
"id": "CVE-2023-53015-de5f0a9f",
"target": {
"function": "betopff_init",
"file": "drivers/hid/hid-betopff.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1a2a47b85cab50a3c146731bfeaf2d860f5344ee",
"digest": {
"function_hash": "222436054704841435722622360666428458620",
"length": 1229.0
},
"signature_type": "Function"
},
{
"id": "CVE-2023-53015-fea79be4",
"target": {
"file": "drivers/hid/hid-betopff.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dbab4dba400d6ea9a9697fbbd287adbf7db1dac4",
"digest": {
"threshold": 0.9,
"line_hashes": [
"124720138848539547514160111283128639140",
"219704720901358285722881208669644565155",
"182926550039441961649502300273365584983",
"288632757392429841164366062331310485021",
"131634178277185195483269420551321346128",
"318135916158900134627646423243920919970",
"114349386004566707045386233662554313303",
"97581736703476453179795483431790837357",
"13523723990998852640174242288172885161",
"315190061780945559318803786072589954650",
"207121160596177519796982572411263923165",
"159980405616273795445124378697473987960",
"118879042457619231787276517883671934085",
"200535604492226510694251855329608472934",
"79289142831562103732556457706076327532",
"319639368917556073207693174336286522589",
"293728087958018176817809425525825098752",
"7555957832749534036983970911977452621"
]
},
"signature_type": "Line"
}
]