CVE-2023-53437: media: uvcvideo: Handle cameras with invalid descriptors

Description

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Handle cameras with invalid descriptors If the source entity does not contain any pads, do not create a link.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

6d30cf81ee3c0368175f76c03120af5d81e0c639 to < c8f4a424af5879baefb0fb8a8a09b09ea1779483affected
b4759a52b8940dbbfc565c918a3893ecaeb5b134 to < 2914259fcea23971c6fed8b2618d3a729a78c365affected
aa1362606059ade437a901fe7c33b24901683c14 to < 4e4e6ca62e77539d4df8d13137e2683b10baddd9affected
cc52ed14f5ca849ef81e6a6bc4beea6dc43514d0 to < d8aa2e1ae6426d7cbddf1735aed1a63ddf0e6909affected
7532dad6634031d083df7af606fac655b8d08b5c to < 31a8d11d28b57656cebfbd4c0b8b76f6ad5b017daffected
7532dad6634031d083df7af606fac655b8d08b5c to < 11196ee3916e50a5da3c1e6ecda19a02dca14ba3affected
7532dad6634031d083df7af606fac655b8d08b5c to < 1a76cfc388cf105d3e04ac592670a52a3864b1baaffected
7532dad6634031d083df7af606fac655b8d08b5c to < 41ddb251c68ac75c101d3a50a68c4629c9055e4caffected
9bf5da0d0fcca080b2254a30fa4b8ed47a96a0d0affected
d920b0940a0b2c0671e5a69ed3b3fe3a3a50b970affected
b950d6d8f4d7c78c9e5d08b61a66387c0b61f924affected
4.14.224 to < 4.14.308affected
4.19.179 to < 4.19.276affected
5.4.103 to < 5.4.235affected
5.10.21 to < 5.10.173affected
4.4.260 to < 4.5affected
4.9.260 to < 4.10affected
5.11.4 to < 5.12affected

Linux Linux

Default version status: affected

5.12affected
0 to < 5.12unaffected
4.14.308 to ≤ 4.14.*unaffected
4.19.276 to ≤ 4.19.*unaffected
5.4.235 to ≤ 5.4.*unaffected
5.10.173 to ≤ 5.10.*unaffected
5.15.100 to ≤ 5.15.*unaffected
6.1.18 to ≤ 6.1.*unaffected
6.2.5 to ≤ 6.2.*unaffected
6.3 to ≤ *unaffected

CVE-2023-53437

media: uvcvideo: Handle cameras with invalid descriptors

Description

Affected products

Linux Linux

Linux Linux

References