PT-2024-2051 · Linux+6 · Linux Kernel+6

Zubin Mithra · Published 2024-03-02 · Updated 2025-09-29 · CVE-2023-52565

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to an out-of-bounds read in the uvcvideo component of the Linux kernel. This occurs when the index provided by the user is bigger than the mask size. The exploitation of this issue may allow an attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Buffer Overflow

Weakness Enumeration

CWE-125

CWE-119

Related Identifiers

ALSA-2024:3618

ALSA-2024:3627

ALSA-2025_12746

ALSA-2025_12752

ALSA-2025_12753

ALSA-2025_16880

BDU:2024-01930

CESA-2024_3618

CESA-2024_3627

CVE-2023-52565

INFSA-2024_3618

INFSA-2024_3627

INFSA-2024_9315

RHSA-2024:3618

RHSA-2024:3627

RHSA-2024:9315

RHSA-2024_3618

RHSA-2024_3627

RHSA-2024_9315

RHSA-2025:10701

RLSA-2024:3618

RLSA-2024:3627

Affected Products

Almalinux

Astra Linux

Centos

Linux Kernel

Red Hat

Red Os

Rocky Linux

References · 211

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52565.json · Exploit
• https://osv.dev/vulnerability/BELL-CVE-2023-52565 · Vendor Advisory
• https://git.kernel.org/stable/c/41ebaa5e0eebea4c3bac96b72f9f8ae0d77c0bdb · Patch
• https://osv.dev/vulnerability/ALSA-2024:3618 · Vendor Advisory
• https://git.kernel.org/stable/c/09635bf4cdd4adf2160198a6041bcc7ca46c0558 · Patch
• https://git.kernel.org/stable/c/8bcf70d787f7d53a3b85ad394f926cfef3eed023 · Patch
• https://errata.rockylinux.org/RLSA-2024:3618 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2024-1031SE47 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2024:3627 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-52565 · Security Note
• https://errata.almalinux.org/8/ALSA-2024-3627.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2024-9315.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-52565 · Security Note
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2024:3627 · Vendor Advisory