CVE-2023-52494
kernel: bus: mhi: host: Add alignment check for event ring read pointer
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · February 29, 2024
Updated · November 21, 2025
Description
A flaw was found in the Linux Kernel. 128 bit struct mhi_ring_element aligned event ring elements are expected, but an unaligned read pointer can be passed. An unaligned read pointer could lead to multiple issues, including a denial of service or ring buffer memory corruption.
Statement
No Red Hat products are affected by this vulnerability.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
CVSS / CWE
CVSS 3.1 · 4.4CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
CWE-99 · Improper Control of Resource Identifiers ('Resource Injection')