What’s Vulnerable › Vulnerabilities

CVE-2023-52495: soc: qcom: pmic_glink_altmode: fix port sanity check

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-03-11 · updated 2026-06-17
• Weakness: CWE-787

Description

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: pmic_glink_altmode: fix port sanity check The PMIC GLINK altmode driver currently supports at most two ports. Fix the incomplete port sanity check on notifications to avoid accessing and corrupting memory beyond the port array if we ever get a notification for an unsupported port.

Affected products

• Linux kernel: from 6.3 before 6.6.15; from 6.7 before 6.7.3 — fixed in 6.6.15, 6.7.3

How to fix

Upgrade to a fixed version: Linux kernel 6.6.15, 6.7.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/532a5557da6892a6b2d5793052e1bce1f4c9e177
• https://git.kernel.org/stable/c/c4fb7d2eac9ff9bfc35a2e4d40c7169a332416e0
• https://git.kernel.org/stable/c/d26edf4ee3672cc9828f2a3ffae34086a712574d
• https://git.kernel.org/stable/c/532a5557da6892a6b2d5793052e1bce1f4c9e177
• https://git.kernel.org/stable/c/c4fb7d2eac9ff9bfc35a2e4d40c7169a332416e0
• https://git.kernel.org/stable/c/d26edf4ee3672cc9828f2a3ffae34086a712574d

Get alerted when CVE-2023-52495 or the next vulnerability affects your stack