Vulnerability Database

296,213

Total vulnerabilities in the database

CVE-2023-53015

In the Linux kernel, the following vulnerability has been resolved:

HID: betop: check shape of output reports

betopff_init() only checks the total sum of the report counts for each report field to be at least 4, but hid_betopff_play() expects 4 report fields. A device advertising an output report with one field and 4 report counts would pass the check but crash the kernel with a NULL pointer dereference in hid_betopff_play().

  • Published: Mar 27, 2025
  • Updated: May 4, 2025
  • CVE: CVE-2023-53015
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.5
  • AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWEs:

Software From Fixed in
linux / linux_kernel 6.2-rc1 6.2-rc1.x
linux / linux_kernel 6.2-rc2 6.2-rc2.x
linux / linux_kernel 6.2-rc3 6.2-rc3.x
linux / linux_kernel 6.2-rc4 6.2-rc4.x
linux / linux_kernel 5.11 5.15.91
linux / linux_kernel 5.16 6.1.9
linux / linux_kernel 4.0 4.14.305
linux / linux_kernel 4.15 4.19.272
linux / linux_kernel 4.20 5.4.231
linux / linux_kernel 5.5 5.10.166