PT-2024-8470 · Linux+5 · Linux Kernel+5

Published

2023-12-29

·

Updated

2025-09-25

·

CVE-2023-52692

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is related to the scarlett2 component of the Linux kernel, specifically with the scarlett2 usb set config() function. This function calls scarlett2 usb get() but does not check the result, potentially leading to an invalid value being used. The vulnerability may allow an attacker to cause a denial of service.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Unchecked Return Value

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-252CWE-388

Related Identifiers

BDU:2024-10030
CVE-2023-52692
SUSE-SU-2024:2008-1
SUSE-SU-2024:2019-1
SUSE-SU-2024:2135-1
SUSE-SU-2024:2190-1
SUSE-SU-2024:2203-1
SUSE-SU-2024:2973-1
SUSE-SU-2025:20008-1
SUSE-SU-2025:20028-1
USN-6818-1
USN-6818-2
USN-6818-3
USN-6818-4
USN-6819-1
USN-6819-2
USN-6819-3
USN-6819-4

Affected Products

Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu