Vulnerability · Published Mar 26, 2024 · Assigned by Linux

CVE-2023-52627iio: adc: ad7091r: Allow users to configure device events

Medium 5.5

In plain English

A medium-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 13% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.5Medium
Exploit odds (30 days)0.2%top 86.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad7091r: Allow users to configure device events AD7091R-5 devices are supported by the ad7091r-5 driver together with the ad7091r-base driver. Those drivers declared iio events for notifying user space when ADC readings fall bellow the thresholds of low limit registers or above the values set in high limit registers. However, to configure iio events and their thresholds, a set of callback functions must be implemented and those were not present until now. The consequence of trying to configure ad7091r-5 events without the proper callback functions was a null pointer dereference in the kernel because the pointers to the callback functions were not set. Implement event configuration callbacks allowing users to read/write event thresholds and enable/disable event generation. Since the event spec structs are generic to AD7091R devices, also move those from the ad7091r-5 driver the base driver so they can be reused when support for ad7091r-2/-4/-8 be added.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.76-1DEBIAN-CVE-2023-52627
Debian:13linux6.6.15-1DEBIAN-CVE-2023-52627
Debian:14linux6.6.15-1DEBIAN-CVE-2023-52627
Ubuntu:22.04:LTSlinux5.15.0-106.116USN-6766-1
Ubuntu:22.04:LTSlinux5.15.0-106.116UBUNTU-CVE-2023-52627
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2023-52627
Ubuntu:22.04:LTSlinux-aws5.15.0-1061.67USN-6766-3
Ubuntu:22.04:LTSlinux-aws5.15.0-1061.67UBUNTU-CVE-2023-52627
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2023-52627
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2023-52627
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2023-52627
Ubuntu:22.04:LTSlinux-azure5.15.0-1063.72UBUNTU-CVE-2023-52627
Ubuntu:22.04:LTSlinux-azure5.15.0-1063.72USN-6766-1
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2023-52627
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2023-52627
Ubuntu:22.04:LTSlinux-azure-6.56.5.0-1022.23~22.04.1UBUNTU-CVE-2023-52627
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1063.72.1UBUNTU-CVE-2023-52627
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1063.72.1USN-6766-1
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2023-52627
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2023-52627
Ubuntu:22.04:LTSlinux-gcp5.15.0-1059.67UBUNTU-CVE-2023-52627
Ubuntu:22.04:LTSlinux-gcp5.15.0-1059.67USN-6766-1
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2023-52627
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2023-52627
Ubuntu:22.04:LTSlinux-gcp-6.56.5.0-1022.24~22.04.1UBUNTU-CVE-2023-52627
Ubuntu:22.04:LTSlinux-gke5.15.0-1058.63UBUNTU-CVE-2023-52627
Ubuntu:22.04:LTSlinux-gke5.15.0-1058.63USN-6766-1
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1044.51USN-6766-1
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1044.51UBUNTU-CVE-2023-52627
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2023-52627
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2023-52627
Ubuntu:22.04:LTSlinux-hwe-6.56.5.0-41.41~22.04.2UBUNTU-CVE-2023-52627
Ubuntu:22.04:LTSlinux-ibm5.15.0-1054.57USN-6766-1
Ubuntu:22.04:LTSlinux-ibm5.15.0-1054.57UBUNTU-CVE-2023-52627
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1057.63USN-6795-1
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1057.63UBUNTU-CVE-2023-52627
Ubuntu:22.04:LTSlinux-kvm5.15.0-1058.63UBUNTU-CVE-2023-52627
Ubuntu:22.04:LTSlinux-kvm5.15.0-1058.63USN-6766-1
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-106.116USN-6766-1
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-106.116UBUNTU-CVE-2023-52627
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2023-52627
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2023-52627
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.56.5.0-41.41.1~22.04.1UBUNTU-CVE-2023-52627
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1054.55USN-6766-1
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1054.55UBUNTU-CVE-2023-52627
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2023-52627
Ubuntu:22.04:LTSlinux-nvidia-6.56.5.0-1021.22UBUNTU-CVE-2023-52627
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1026.26UBUNTU-CVE-2023-52627
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1015.15UBUNTU-CVE-2023-52627
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2023-52627
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2023-52627
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2023-52627
Ubuntu:22.04:LTSlinux-oem-6.56.5.0-1024.25UBUNTU-CVE-2023-52627
Ubuntu:22.04:LTSlinux-oracle5.15.0-1059.65USN-6766-1
Ubuntu:22.04:LTSlinux-oracle5.15.0-1059.65UBUNTU-CVE-2023-52627
Ubuntu:22.04:LTSlinux-oracle-6.56.5.0-1024.24~22.04.1UBUNTU-CVE-2023-52627
Ubuntu:22.04:LTSlinux-raspi5.15.0-1054.57USN-6766-2
Ubuntu:22.04:LTSlinux-raspi5.15.0-1054.57UBUNTU-CVE-2023-52627
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2023-52627
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2023-52627
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2023-52627
Ubuntu:22.04:LTSlinux-riscv-6.56.5.0-40.40.1~22.04.1UBUNTU-CVE-2023-52627
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2023-52627
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2023-52627
Ubuntu:22.04:LTSlinux-starfive-6.56.5.0-1015.16~22.04.1UBUNTU-CVE-2023-52627
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1030.34UBUNTU-CVE-2023-52627

Affected products (as reported)

VendorProductVersions
Linux Linux ca69300173b642ba64118200172171ea5967b6c5 – before 1eba6f7ffa295a0eec098c107043074be7cc4ec5ca69300173b642ba64118200172171ea5967b6c5 – before 49f322ce1f265935f15e5512da69a399f27a5091ca69300173b642ba64118200172171ea5967b6c5 – before 137568aa540a9f587c48ff7d4c51cdba08cfe9a4ca69300173b642ba64118200172171ea5967b6c5 – before 89c4e63324e208a23098f7fb15c00487cecbfed2ca69300173b642ba64118200172171ea5967b6c5 – before 55aca2ce91a63740278502066beaddbd841af9c6ca69300173b642ba64118200172171ea5967b6c5 – before 020e71c7ffc25dfe29ed9be6c2d39af7bd7f661f
Linux Linux 5.6

References