{"id":"CVE-2023-52495","state":"PUBLISHED","title":"soc: qcom: pmic_glink_altmode: fix port sanity check","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nsoc: qcom: pmic_glink_altmode: fix port sanity check\n\nThe PMIC GLINK altmode driver currently supports at most two ports.\n\nFix the incomplete port sanity check on notifications to avoid\naccessing and corrupting memory beyond the port array if we ever get a\nnotification for an unsupported port.","publishedAt":"2024-02-29T15:52:12.263Z","updatedAt":"2026-05-11T19:28:26.504Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"080b4e24852b1d5b66929f69344e6c3eeb963941","status":"affected","lessThan":"532a5557da6892a6b2d5793052e1bce1f4c9e177","versionType":"git"},{"version":"080b4e24852b1d5b66929f69344e6c3eeb963941","status":"affected","lessThan":"d26edf4ee3672cc9828f2a3ffae34086a712574d","versionType":"git"},{"version":"080b4e24852b1d5b66929f69344e6c3eeb963941","status":"affected","lessThan":"c4fb7d2eac9ff9bfc35a2e4d40c7169a332416e0","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/soc/qcom/pmic_glink_altmode.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"6.3","status":"affected"},{"version":"0","status":"unaffected","lessThan":"6.3","versionType":"semver"},{"version":"6.6.15","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.7.3","status":"unaffected","lessThanOrEqual":"6.7.*","versionType":"semver"},{"version":"6.8","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/soc/qcom/pmic_glink_altmode.c"]}],"references":["https://git.kernel.org/stable/c/532a5557da6892a6b2d5793052e1bce1f4c9e177","https://git.kernel.org/stable/c/d26edf4ee3672cc9828f2a3ffae34086a712574d","https://git.kernel.org/stable/c/c4fb7d2eac9ff9bfc35a2e4d40c7169a332416e0"],"weaknesses":[],"ingestedAt":"2026-10-29T20:06:33.064Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/52xxx/CVE-2023-52495.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2023-52495","state":"PUBLISHED","datePublished":"2024-02-29T15:52:12.263Z","dateUpdated":"2026-05-11T19:28:26.504Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2024-02-20T12:30:33.305Z"},"containers":{"cna":{"title":"soc: qcom: pmic_glink_altmode: fix port sanity check","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nsoc: qcom: pmic_glink_altmode: fix port sanity check\n\nThe PMIC GLINK altmode driver currently supports at most two ports.\n\nFix the incomplete port sanity check on notifications to avoid\naccessing and corrupting memory beyond the port array if we ever get a\nnotification for an unsupported port."}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"080b4e24852b1d5b66929f69344e6c3eeb963941","status":"affected","lessThan":"532a5557da6892a6b2d5793052e1bce1f4c9e177","versionType":"git"},{"version":"080b4e24852b1d5b66929f69344e6c3eeb963941","status":"affected","lessThan":"d26edf4ee3672cc9828f2a3ffae34086a712574d","versionType":"git"},{"version":"080b4e24852b1d5b66929f69344e6c3eeb963941","status":"affected","lessThan":"c4fb7d2eac9ff9bfc35a2e4d40c7169a332416e0","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/soc/qcom/pmic_glink_altmode.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"6.3","status":"affected"},{"version":"0","status":"unaffected","lessThan":"6.3","versionType":"semver"},{"version":"6.6.15","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.7.3","status":"unaffected","lessThanOrEqual":"6.7.*","versionType":"semver"},{"version":"6.8","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/soc/qcom/pmic_glink_altmode.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/532a5557da6892a6b2d5793052e1bce1f4c9e177"},{"url":"https://git.kernel.org/stable/c/d26edf4ee3672cc9828f2a3ffae34086a712574d"},{"url":"https://git.kernel.org/stable/c/c4fb7d2eac9ff9bfc35a2e4d40c7169a332416e0"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-05-11T19:28:26.504Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3","versionEndExcluding":"6.6.15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3","versionEndExcluding":"6.7.3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3","versionEndExcluding":"6.8"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2023-52495","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2024-03-12T18:01:34.218248Z"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-06-04T17:23:12.066Z"}},{"title":"CVE Program Container","references":[{"url":"https://git.kernel.org/stable/c/532a5557da6892a6b2d5793052e1bce1f4c9e177","tags":["x_transferred"]},{"url":"https://git.kernel.org/stable/c/d26edf4ee3672cc9828f2a3ffae34086a712574d","tags":["x_transferred"]},{"url":"https://git.kernel.org/stable/c/c4fb7d2eac9ff9bfc35a2e4d40c7169a332416e0","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T23:03:19.963Z"}}]}}}