CVE-2023-52649 Affecting kernel-doc package, versions *
Threat Intelligence
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-CENTOS9-KERNELDOC-6752174
- published 2 May 2024
- disclosed 1 May 2024
Introduced: 1 May 2024
CVE-2023-52649 Open this link in a new tabHow to fix?
There is no fixed version for Centos:9 kernel-doc.
NVD Description
Note: Versions mentioned in the description apply only to the upstream kernel-doc package and not the kernel-doc package as distributed by Centos.
See How to fix? for Centos:9 relevant fixed versions and status.
In the Linux kernel, the following vulnerability has been resolved:
drm/vkms: Avoid reading beyond LUT array
When the floor LUT index (drm_fixp2int(lut_index) is the last index of the array the ceil LUT index will point to an entry beyond the array. Make sure we guard against it and use the value of the floor LUT index.
v3:
- Drop bits from commit description that didn't contribute anything of value
References
- https://access.redhat.com/security/cve/CVE-2023-52649
- https://git.kernel.org/stable/c/046c1184ce60b0a37d48134f17ddbc1f32ce02bd
- https://git.kernel.org/stable/c/2fee84030d12d9fddfa874e4562d71761a129277
- https://git.kernel.org/stable/c/92800aaeff51b8358d1e0a7eb74daf8aa2d7ce9d
- https://git.kernel.org/stable/c/9556c167673057d48ce4a0da675026fe046654c1