Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2023-53015

HID: betop: check shape of output reports

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: HID: betop: check shape of output reports betopff_init() only checks the total sum of the report counts for each report field to be at least 4, but hid_betopff_play() expects 4 report fields. A device advertising an output report with one field and 4 report counts would pass the check but crash the kernel with a NULL pointer dereference in hid_betopff_play().

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 52cd7785f3cdd2724f4efb5b21dbc75d6f9ccef4 to < dbab4dba400d6ea9a9697fbbd287adbf7db1dac4affected
  • 52cd7785f3cdd2724f4efb5b21dbc75d6f9ccef4 to < 7317326f685824c7c29bd80841fd18041af6bb73affected
  • 52cd7785f3cdd2724f4efb5b21dbc75d6f9ccef4 to < d3065cc56221d1a5eda237e94eaf2a627b88ab79affected
  • 52cd7785f3cdd2724f4efb5b21dbc75d6f9ccef4 to < 28fc6095da22dc88433d79578ae1c495ebe8ca43affected
  • 52cd7785f3cdd2724f4efb5b21dbc75d6f9ccef4 to < 1a2a47b85cab50a3c146731bfeaf2d860f5344eeaffected
  • 52cd7785f3cdd2724f4efb5b21dbc75d6f9ccef4 to < 07bc32e53c7bd5c91472cc485231ef6274db9b76affected
  • 52cd7785f3cdd2724f4efb5b21dbc75d6f9ccef4 to < 3782c0d6edf658b71354a64d60aa7a296188fc90affected

Linux Linux

Default version status: affected

  • 4.0affected
  • 0 to < 4.0unaffected
  • 4.14.305 to ≤ 4.14.*unaffected
  • 4.19.272 to ≤ 4.19.*unaffected
  • 5.4.231 to ≤ 5.4.*unaffected
  • 5.10.166 to ≤ 5.10.*unaffected
  • 5.15.91 to ≤ 5.15.*unaffected
  • 6.1.9 to ≤ 6.1.*unaffected
  • 6.2 to ≤ *unaffected

References