What’s Vulnerable › Vulnerabilities

CVE-2023-52565: media: uvcvideo: Fix OOB read

• Severity: high (CVSS 7.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-03-02 · updated 2026-08-04
• Weakness: CWE-125

Description

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix OOB read If the index provided by the user is bigger than the mask size, we might do an out of bound read.

Affected products

• Linux kernel: from 6.1.16 before 6.1.56; from 6.3 before 6.5.6; 6.6-rc1, 6.6-rc2 — fixed in 6.1.56, 6.5.6

How to fix

Upgrade to a fixed version: Linux kernel 6.1.56, 6.5.6. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/09635bf4cdd4adf2160198a6041bcc7ca46c0558
• https://git.kernel.org/stable/c/41ebaa5e0eebea4c3bac96b72f9f8ae0d77c0bdb
• https://git.kernel.org/stable/c/8bcf70d787f7d53a3b85ad394f926cfef3eed023
• https://git.kernel.org/stable/c/09635bf4cdd4adf2160198a6041bcc7ca46c0558
• https://git.kernel.org/stable/c/41ebaa5e0eebea4c3bac96b72f9f8ae0d77c0bdb
• https://git.kernel.org/stable/c/8bcf70d787f7d53a3b85ad394f926cfef3eed023

Get alerted when CVE-2023-52565 or the next vulnerability affects your stack