Log in Start free

Vulnerability · Published Mar 27, 2025 · Assigned by Linux

CVE-2023-53015HID: betop: check shape of output reports

Medium 5.5

In plain English

A medium-severity null pointer dereference in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 11% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.5Medium
Exploit odds (30 days)0.2%top 89.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: HID: betop: check shape of output reports betopff_init() only checks the total sum of the report counts for each report field to be at least 4, but hid_betopff_play() expects 4 report fields. A device advertising an output report with one field and 4 report counts would pass the check but crash the kernel with a NULL pointer dereference in hid_betopff_play().

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.11-1DEBIAN-CVE-2023-53015
Debian:13linux6.1.11-1DEBIAN-CVE-2023-53015
Debian:14linux6.1.11-1DEBIAN-CVE-2023-53015
Ubuntu:22.04:LTSlinux5.15.0-70.77UBUNTU-CVE-2023-53015
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2023-53015
Ubuntu:22.04:LTSlinux-aws5.15.0-1034.38UBUNTU-CVE-2023-53015
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2023-53015
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2023-53015
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2023-53015
Ubuntu:22.04:LTSlinux-azure5.15.0-1036.43UBUNTU-CVE-2023-53015
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2023-53015
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2023-53015
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2023-53015
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1036.43.1UBUNTU-CVE-2023-53015
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2023-53015
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2023-53015
Ubuntu:22.04:LTSlinux-gcp5.15.0-1032.40UBUNTU-CVE-2023-53015
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2023-53015
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2023-53015
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2023-53015
Ubuntu:22.04:LTSlinux-gke5.15.0-1031.36UBUNTU-CVE-2023-53015
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1018.23UBUNTU-CVE-2023-53015
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2023-53015
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2023-53015
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2023-53015
Ubuntu:22.04:LTSlinux-ibm5.15.0-1028.31UBUNTU-CVE-2023-53015
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1028.33UBUNTU-CVE-2023-53015
Ubuntu:22.04:LTSlinux-kvm5.15.0-1031.36UBUNTU-CVE-2023-53015
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-70.77UBUNTU-CVE-2023-53015
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2023-53015
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2023-53015
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2023-53015
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1023.23UBUNTU-CVE-2023-53015
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2023-53015
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2023-53015
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2023-53015
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2023-53015
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2023-53015
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2023-53015
Ubuntu:22.04:LTSlinux-oracle5.15.0-1033.39UBUNTU-CVE-2023-53015
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2023-53015
Ubuntu:22.04:LTSlinux-raspi5.15.0-1027.29UBUNTU-CVE-2023-53015
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2023-53015
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2023-53015
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2023-53015
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2023-53015
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2023-53015
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2023-53015
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2023-53015
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2023-53015
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2023-53015

Affected products (as reported)

VendorProductVersions
Linux Linux 52cd7785f3cdd2724f4efb5b21dbc75d6f9ccef4 – before dbab4dba400d6ea9a9697fbbd287adbf7db1dac452cd7785f3cdd2724f4efb5b21dbc75d6f9ccef4 – before 7317326f685824c7c29bd80841fd18041af6bb7352cd7785f3cdd2724f4efb5b21dbc75d6f9ccef4 – before d3065cc56221d1a5eda237e94eaf2a627b88ab7952cd7785f3cdd2724f4efb5b21dbc75d6f9ccef4 – before 28fc6095da22dc88433d79578ae1c495ebe8ca4352cd7785f3cdd2724f4efb5b21dbc75d6f9ccef4 – before 1a2a47b85cab50a3c146731bfeaf2d860f5344ee52cd7785f3cdd2724f4efb5b21dbc75d6f9ccef4 – before 07bc32e53c7bd5c91472cc485231ef6274db9b7652cd7785f3cdd2724f4efb5b21dbc75d6f9ccef4 – before 3782c0d6edf658b71354a64d60aa7a296188fc90
Linux Linux 4.0

Weakness: CWE-476 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References