What’s Vulnerable › Vulnerabilities
CVE-2023-52858: clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- Severity: medium (CVSS 6.2 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-05-21 · updated 2026-06-17
- Weakness: CWE-476
Description
In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data Add the check for the return value of mtk_alloc_clk_data() in order to avoid NULL pointer dereference.
Affected products
- Linux kernel: from 5.0 before 5.4.261; from 5.5 before 5.10.201; from 5.11 before 5.15.139; from 5.16 before 6.1.63; from 6.2 before 6.5.12; from 6.6 before 6.6.2 — fixed in 5.10.201, 5.15.139, 5.4.261, 6.1.63, 6.5.12, 6.6.2
How to fix
Upgrade to a fixed version: Linux kernel 5.10.201, 5.15.139, 5.4.261, 6.1.63. Check the vendor advisory for mitigations.
References
- https://git.kernel.org/stable/c/1d89430fc3158f872d492f1b88d07262f48290c0
- https://git.kernel.org/stable/c/2befa515c1bb6cdd33c262b909d93d1973a219aa
- https://git.kernel.org/stable/c/4f861b63945e076f9f003a5fad958174096df1ee
- https://git.kernel.org/stable/c/5fbea47eebff5daeca7d918c99289bcd3ae4dc8d
- https://git.kernel.org/stable/c/a836efc21ef04608333d6d05753e558ebd1f85d0
- https://git.kernel.org/stable/c/e8ae4b49dd9cfde69d8de8c0c0cd7cf1b004482e
- https://git.kernel.org/stable/c/e964d21dc034b650d719c4ea39564bec72b42f94
- https://git.kernel.org/stable/c/1d89430fc3158f872d492f1b88d07262f48290c0
- https://git.kernel.org/stable/c/2befa515c1bb6cdd33c262b909d93d1973a219aa
- https://git.kernel.org/stable/c/4f861b63945e076f9f003a5fad958174096df1ee
- https://git.kernel.org/stable/c/5fbea47eebff5daeca7d918c99289bcd3ae4dc8d
- https://git.kernel.org/stable/c/a836efc21ef04608333d6d05753e558ebd1f85d0
Get alerted when CVE-2023-52858 or the next vulnerability affects your stack