CVE-2023-52494

bus: mhi: host: Add alignment check for event ring read pointer

published February 29, 2024

CVSS
—
EPSS
0%
Percentile
19.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

bus: mhi: host: Add alignment check for event ring read pointer

Though we do check the event ring read pointer by "is_valid_ring_ptr"

to make sure it is in the buffer range, but there is another risk the

pointer may be not aligned. Since we are expecting event ring elements

are 128 bits(struct mhi_ring_element) aligned, an unaligned read pointer

could lead to multiple issues like DoS or ring buffer memory corruption.

So add a alignment check for event ring read pointer.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00282 · 19.7th percentile
Published
2024-02-29T15:52Z
EPSS history
Timeline
  • 29 FEB 15:52Z
    bus: mhi: host: Add alignment check for event ring read pointer
    cvelistv5