CVE-2023-52754

In the Linux kernel, the following vulnerability has been resolved: media: imon: fix access to invalid resource for the second interface imon driver probes two USB interfaces, and at the probe of the second interface, the driver assumes blindly that the first interface got bound with the same imon driver. It's usually true, but it's still possible that the first interface is bound with another driver via a malformed descriptor. Then it may lead to a memory corruption, as spotted by syzkaller; imon driver accesses the data from drvdata as struct imon_context object although it's a completely different one that was assigned by another driver. This patch adds a sanity check -- whether the first interface is really bound with the imon driver or not -- for avoiding the problem above at the probe time.

• CWE-401

• https://git.kernel.org/stable/c/0f5068519f89d928d6c51100e4b274479123829fPatch
• https://git.kernel.org/stable/c/10ec5a97f8f5a772a1a42b4eb27196b447cd3aa9Patch
• https://git.kernel.org/stable/c/2a493a34bd6e496c55fabedd82b957193ace178fPatch
• https://git.kernel.org/stable/c/5e0b788fb96be36d1baf1a5c88d09c7c82a0452aPatch
• https://git.kernel.org/stable/c/a1766a4fd83befa0b34d932d532e7ebb7fab1fa7Patch
• https://git.kernel.org/stable/c/b083aaf5db2eeca9e362723258e5d8698f7dd84ePatch
• https://git.kernel.org/stable/c/0f5068519f89d928d6c51100e4b274479123829fPatch
• https://git.kernel.org/stable/c/10ec5a97f8f5a772a1a42b4eb27196b447cd3aa9Patch
• https://git.kernel.org/stable/c/2a493a34bd6e496c55fabedd82b957193ace178fPatch
• https://git.kernel.org/stable/c/5e0b788fb96be36d1baf1a5c88d09c7c82a0452aPatch
• https://git.kernel.org/stable/c/a1766a4fd83befa0b34d932d532e7ebb7fab1fa7Patch
• https://git.kernel.org/stable/c/b083aaf5db2eeca9e362723258e5d8698f7dd84ePatch

Published

May 21, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-52749In the Linux kernel, the following vulnerability has been re…4.7
• CVE-2023-5275Improper Input Validation vulnerability in simulation functi…4.7
• CVE-2023-52750In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-52751In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2023-52752In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2023-52753In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-52755In the Linux kernel, the following vulnerability has been re…9.8
• CVE-2023-52756Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2023-52757In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2023-52758Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2023-52759Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2023-5276A vulnerability classified as critical was found in SourceCo…9.8