GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2023-52864 (GCVE-0-2023-52864)

Vulnerability from cvelistv5 – Published: 2024-05-21 15:31 – Updated: 2026-08-05 09:11
VLAI
Title
platform/x86: wmi: Fix opening of char device
Summary
In the Linux kernel, the following vulnerability has been resolved: platform/x86: wmi: Fix opening of char device Since commit fa1f68db6ca7 ("drivers: misc: pass miscdevice pointer via file private data"), the miscdevice stores a pointer to itself inside filp->private_data, which means that private_data will not be NULL when wmi_char_open() is called. This might cause memory corruption should wmi_char_open() be unable to find its driver, something which can happen when the associated WMI device is deleted in wmi_free_devices(). Fix the problem by using the miscdevice pointer to retrieve the WMI device data associated with a char device using container_of(). This also avoids wmi_char_open() picking a wrong WMI device bound to a driver with the same name as the original driver.
Severity
7 (High)
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-05-22 18:21 UTC
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 44b6b7661132b1b0e5fd3147ded66f1e4a817ca9 , < cf098e937dd125c0317a0d6f261ac2a950a233d6 (git)
Affected: 44b6b7661132b1b0e5fd3147ded66f1e4a817ca9 , < 9fb0eed09e1470cd4021ff52b2b9dfcbcee4c203 (git)
Affected: 44b6b7661132b1b0e5fd3147ded66f1e4a817ca9 , < d426a2955e45a95b2282764105fcfb110a540453 (git)
Affected: 44b6b7661132b1b0e5fd3147ded66f1e4a817ca9 , < e0bf076b734a2fab92d8fddc2b8b03462eee7097 (git)
Affected: 44b6b7661132b1b0e5fd3147ded66f1e4a817ca9 , < 44a96796d25809502c75771d40ee693c2e44724e (git)
Affected: 44b6b7661132b1b0e5fd3147ded66f1e4a817ca9 , < 36d85fa7ae0d6be651c1a745191fa7ef055db43e (git)
Affected: 44b6b7661132b1b0e5fd3147ded66f1e4a817ca9 , < fb7b06b59c6887659c6ed0ecd3110835eecbb6a3 (git)
Affected: 44b6b7661132b1b0e5fd3147ded66f1e4a817ca9 , < eba9ac7abab91c8f6d351460239108bef5e7a0b6 (git)
guessed Create a notification for this product.
Linux Linux Affected: 4.15
Unaffected: 0 , < 4.15 (semver)
Unaffected: 4.19.299 , ≤ 4.19.* (semver)
Unaffected: 5.4.261 , ≤ 5.4.* (semver)
Unaffected: 5.10.201 , ≤ 5.10.* (semver)
Unaffected: 5.15.139 , ≤ 5.15.* (semver)
Unaffected: 6.1.63 , ≤ 6.1.* (semver)
Unaffected: 6.5.12 , ≤ 6.5.* (semver)
Unaffected: 6.6.2 , ≤ 6.6.* (semver)
Unaffected: 6.7 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-52864",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-05-22T18:21:10.578430Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-04T17:24:07.966Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T23:11:36.054Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/cf098e937dd125c0317a0d6f261ac2a950a233d6"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/9fb0eed09e1470cd4021ff52b2b9dfcbcee4c203"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/d426a2955e45a95b2282764105fcfb110a540453"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/e0bf076b734a2fab92d8fddc2b8b03462eee7097"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/44a96796d25809502c75771d40ee693c2e44724e"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/36d85fa7ae0d6be651c1a745191fa7ef055db43e"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/fb7b06b59c6887659c6ed0ecd3110835eecbb6a3"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/eba9ac7abab91c8f6d351460239108bef5e7a0b6"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/platform/x86/wmi.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "cf098e937dd125c0317a0d6f261ac2a950a233d6",
              "status": "affected",
              "version": "44b6b7661132b1b0e5fd3147ded66f1e4a817ca9",
              "versionType": "git"
            },
            {
              "lessThan": "9fb0eed09e1470cd4021ff52b2b9dfcbcee4c203",
              "status": "affected",
              "version": "44b6b7661132b1b0e5fd3147ded66f1e4a817ca9",
              "versionType": "git"
            },
            {
              "lessThan": "d426a2955e45a95b2282764105fcfb110a540453",
              "status": "affected",
              "version": "44b6b7661132b1b0e5fd3147ded66f1e4a817ca9",
              "versionType": "git"
            },
            {
              "lessThan": "e0bf076b734a2fab92d8fddc2b8b03462eee7097",
              "status": "affected",
              "version": "44b6b7661132b1b0e5fd3147ded66f1e4a817ca9",
              "versionType": "git"
            },
            {
              "lessThan": "44a96796d25809502c75771d40ee693c2e44724e",
              "status": "affected",
              "version": "44b6b7661132b1b0e5fd3147ded66f1e4a817ca9",
              "versionType": "git"
            },
            {
              "lessThan": "36d85fa7ae0d6be651c1a745191fa7ef055db43e",
              "status": "affected",
              "version": "44b6b7661132b1b0e5fd3147ded66f1e4a817ca9",
              "versionType": "git"
            },
            {
              "lessThan": "fb7b06b59c6887659c6ed0ecd3110835eecbb6a3",
              "status": "affected",
              "version": "44b6b7661132b1b0e5fd3147ded66f1e4a817ca9",
              "versionType": "git"
            },
            {
              "lessThan": "eba9ac7abab91c8f6d351460239108bef5e7a0b6",
              "status": "affected",
              "version": "44b6b7661132b1b0e5fd3147ded66f1e4a817ca9",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/platform/x86/wmi.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.15"
            },
            {
              "lessThan": "4.15",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.299",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.261",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.201",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.139",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.63",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.5.*",
              "status": "unaffected",
              "version": "6.5.12",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.2",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.7",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.299",
                  "versionStartIncluding": "4.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.261",
                  "versionStartIncluding": "4.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.201",
                  "versionStartIncluding": "4.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.139",
                  "versionStartIncluding": "4.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.63",
                  "versionStartIncluding": "4.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.5.12",
                  "versionStartIncluding": "4.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.2",
                  "versionStartIncluding": "4.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.7",
                  "versionStartIncluding": "4.15",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86: wmi: Fix opening of char device\n\nSince commit fa1f68db6ca7 (\"drivers: misc: pass miscdevice pointer via\nfile private data\"), the miscdevice stores a pointer to itself inside\nfilp-\u003eprivate_data, which means that private_data will not be NULL when\nwmi_char_open() is called. This might cause memory corruption should\nwmi_char_open() be unable to find its driver, something which can\nhappen when the associated WMI device is deleted in wmi_free_devices().\n\nFix the problem by using the miscdevice pointer to retrieve the WMI\ndevice data associated with a char device using container_of(). This\nalso avoids wmi_char_open() picking a wrong WMI device bound to a\ndriver with the same name as the original driver."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The bug is reached by opening the local misc char device `/dev/wmi/$driver` (typically `/dev/wmi/dell-smbios`): open \u2192 misc_open \u2192 wmi_char_open. There is no network or adjacent-link path into this platform/x86 WMI code.\nAC:H - Memory corruption requires wmi_char_open() to fail its driver lookup while misc_open still succeeds, which the fix ties to wmi_free_devices() list_del before misc_deregister\u2014i.e. concurrent ACPI/platform WMI removal (e.g. rmmod wmi). An unprivileged attacker can spam open/ioctl but cannot induce that privileged teardown, matching other module-unload races scored AC:H.\nPR:L - The char device is registered with mode 0444, so any local unprivileged user can open it and issue read/ioctl; no init-namespace root or capability is required on the attacker\u2019s side of the race.\nUI:N - The attacker opens and operates on the WMI char device in their own process; no victim action is required. Concurrent administrative device removal is Attack Complexity, not User Interaction.\nS:U - Type confusion / use-after-free stays inside the host kernel\u2019s WMI/misc authority and does not cross a VM, IOMMU, or sandbox boundary.\nC:H - Failed lookup leaves filp-\u003eprivate_data as a miscdevice* that read/ioctl treat as struct wmi_block, causing out-of-bounds reads of adjacent heap; if the wblock is freed while the fd is held this becomes a UAF disclosure primitive, scored High per kernel guidance.\nI:H - The same type confusion/UAF makes wmi_ioctl() mutex_lock, dereference handler_data, and copy_from_user() through misinterpreted pointers\u2014yielding heap corruption and an arbitrary-write primitive after reclaim, so Integrity is High.\nA:H - Misinterpreting a miscdevice as a wmi_block (or using a freed wblock) reliably leads to invalid memory access, oops/panic, or hang on corrupted locks; any such kernel crash/UAF is Availability High."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T09:11:43.009Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/cf098e937dd125c0317a0d6f261ac2a950a233d6"
        },
        {
          "url": "https://git.kernel.org/stable/c/9fb0eed09e1470cd4021ff52b2b9dfcbcee4c203"
        },
        {
          "url": "https://git.kernel.org/stable/c/d426a2955e45a95b2282764105fcfb110a540453"
        },
        {
          "url": "https://git.kernel.org/stable/c/e0bf076b734a2fab92d8fddc2b8b03462eee7097"
        },
        {
          "url": "https://git.kernel.org/stable/c/44a96796d25809502c75771d40ee693c2e44724e"
        },
        {
          "url": "https://git.kernel.org/stable/c/36d85fa7ae0d6be651c1a745191fa7ef055db43e"
        },
        {
          "url": "https://git.kernel.org/stable/c/fb7b06b59c6887659c6ed0ecd3110835eecbb6a3"
        },
        {
          "url": "https://git.kernel.org/stable/c/eba9ac7abab91c8f6d351460239108bef5e7a0b6"
        }
      ],
      "title": "platform/x86: wmi: Fix opening of char device",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-52864",
    "datePublished": "2024-05-21T15:31:55.875Z",
    "dateReserved": "2024-05-21T15:19:24.261Z",
    "dateUpdated": "2026-08-05T09:11:43.009Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2023-52864",
      "date": "2026-09-16",
      "epss": "0.00266",
      "percentile": "0.18637"
    },
    "fkie_nvd": {
      "descriptions": "[{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nplatform/x86: wmi: Fix opening of char device\\n\\nSince commit fa1f68db6ca7 (\\\"drivers: misc: pass miscdevice pointer via\\nfile private data\\\"), the miscdevice stores a pointer to itself inside\\nfilp-\u003eprivate_data, which means that private_data will not be NULL when\\nwmi_char_open() is called. This might cause memory corruption should\\nwmi_char_open() be unable to find its driver, something which can\\nhappen when the associated WMI device is deleted in wmi_free_devices().\\n\\nFix the problem by using the miscdevice pointer to retrieve the WMI\\ndevice data associated with a char device using container_of(). This\\nalso avoids wmi_char_open() picking a wrong WMI device bound to a\\ndriver with the same name as the original driver.\"}, {\"lang\": \"es\", \"value\": \"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: plataforma/x86: wmi: corrige la apertura del dispositivo char. Desde la confirmaci\\u00f3n fa1f68db6ca7 (\\\"drivers: misc: pasar el puntero del dispositivo misc a trav\\u00e9s de datos privados del archivo\\\"), el dispositivo misc almacena un puntero a s\\u00ed mismo en su interior. filp-\u0026gt;private_data, lo que significa que private_data no ser\\u00e1 NULL cuando se llame a wmi_char_open(). Esto podr\\u00eda causar da\\u00f1os en la memoria si wmi_char_open() no puede encontrar su controlador, algo que puede suceder cuando el dispositivo WMI asociado se elimina en wmi_free_devices(). Solucione el problema utilizando el puntero miscdevice para recuperar los datos del dispositivo WMI asociados con un dispositivo char usando container_of(). Esto tambi\\u00e9n evita que wmi_char_open() seleccione un dispositivo WMI incorrecto vinculado a un controlador con el mismo nombre que el controlador original.\"}]",
      "id": "CVE-2023-52864",
      "lastModified": "2024-11-21T08:40:45.090",
      "published": "2024-05-21T16:15:23.317",
      "references": "[{\"url\": \"https://git.kernel.org/stable/c/36d85fa7ae0d6be651c1a745191fa7ef055db43e\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/44a96796d25809502c75771d40ee693c2e44724e\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/9fb0eed09e1470cd4021ff52b2b9dfcbcee4c203\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/cf098e937dd125c0317a0d6f261ac2a950a233d6\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/d426a2955e45a95b2282764105fcfb110a540453\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/e0bf076b734a2fab92d8fddc2b8b03462eee7097\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/eba9ac7abab91c8f6d351460239108bef5e7a0b6\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/fb7b06b59c6887659c6ed0ecd3110835eecbb6a3\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/36d85fa7ae0d6be651c1a745191fa7ef055db43e\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/44a96796d25809502c75771d40ee693c2e44724e\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/9fb0eed09e1470cd4021ff52b2b9dfcbcee4c203\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/cf098e937dd125c0317a0d6f261ac2a950a233d6\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/d426a2955e45a95b2282764105fcfb110a540453\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/e0bf076b734a2fab92d8fddc2b8b03462eee7097\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/eba9ac7abab91c8f6d351460239108bef5e7a0b6\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/fb7b06b59c6887659c6ed0ecd3110835eecbb6a3\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
      "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "vulnStatus": "Awaiting Analysis"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2023-52864\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-05-21T16:15:23.317\",\"lastModified\":\"2026-08-04T10:18:46.350\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nplatform/x86: wmi: Fix opening of char device\\n\\nSince commit fa1f68db6ca7 (\\\"drivers: misc: pass miscdevice pointer via\\nfile private data\\\"), the miscdevice stores a pointer to itself inside\\nfilp-\u003eprivate_data, which means that private_data will not be NULL when\\nwmi_char_open() is called. This might cause memory corruption should\\nwmi_char_open() be unable to find its driver, something which can\\nhappen when the associated WMI device is deleted in wmi_free_devices().\\n\\nFix the problem by using the miscdevice pointer to retrieve the WMI\\ndevice data associated with a char device using container_of(). This\\nalso avoids wmi_char_open() picking a wrong WMI device bound to a\\ndriver with the same name as the original driver.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: plataforma/x86: wmi: corrige la apertura del dispositivo char. Desde la confirmaci\u00f3n fa1f68db6ca7 (\\\"drivers: misc: pasar el puntero del dispositivo misc a trav\u00e9s de datos privados del archivo\\\"), el dispositivo misc almacena un puntero a s\u00ed mismo en su interior. filp-\u0026gt;private_data, lo que significa que private_data no ser\u00e1 NULL cuando se llame a wmi_char_open(). Esto podr\u00eda causar da\u00f1os en la memoria si wmi_char_open() no puede encontrar su controlador, algo que puede suceder cuando el dispositivo WMI asociado se elimina en wmi_free_devices(). Solucione el problema utilizando el puntero miscdevice para recuperar los datos del dispositivo WMI asociados con un dispositivo char usando container_of(). Esto tambi\u00e9n evita que wmi_char_open() seleccione un dispositivo WMI incorrecto vinculado a un controlador con el mismo nombre que el controlador original.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/platform/x86/wmi.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"44b6b7661132b1b0e5fd3147ded66f1e4a817ca9\",\"lessThan\":\"cf098e937dd125c0317a0d6f261ac2a950a233d6\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"44b6b7661132b1b0e5fd3147ded66f1e4a817ca9\",\"lessThan\":\"9fb0eed09e1470cd4021ff52b2b9dfcbcee4c203\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"44b6b7661132b1b0e5fd3147ded66f1e4a817ca9\",\"lessThan\":\"d426a2955e45a95b2282764105fcfb110a540453\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"44b6b7661132b1b0e5fd3147ded66f1e4a817ca9\",\"lessThan\":\"e0bf076b734a2fab92d8fddc2b8b03462eee7097\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"44b6b7661132b1b0e5fd3147ded66f1e4a817ca9\",\"lessThan\":\"44a96796d25809502c75771d40ee693c2e44724e\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"44b6b7661132b1b0e5fd3147ded66f1e4a817ca9\",\"lessThan\":\"36d85fa7ae0d6be651c1a745191fa7ef055db43e\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"44b6b7661132b1b0e5fd3147ded66f1e4a817ca9\",\"lessThan\":\"fb7b06b59c6887659c6ed0ecd3110835eecbb6a3\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"44b6b7661132b1b0e5fd3147ded66f1e4a817ca9\",\"lessThan\":\"eba9ac7abab91c8f6d351460239108bef5e7a0b6\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/platform/x86/wmi.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"4.15\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"4.15\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"4.19.299\",\"lessThanOrEqual\":\"4.19.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.4.261\",\"lessThanOrEqual\":\"5.4.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.201\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.139\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.63\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.5.12\",\"lessThanOrEqual\":\"6.5.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.2\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.7\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.0,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.0,\"impactScore\":5.9},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2024-05-22T18:21:10.578430Z\",\"id\":\"CVE-2023-52864\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-787\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.15\",\"versionEndExcluding\":\"4.19.299\",\"matchCriteriaId\":\"F51D1457-86F8-4A6C-A7B9-323058B3C5E8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.20\",\"versionEndExcluding\":\"5.4.261\",\"matchCriteriaId\":\"286E50BB-5A21-49BA-A6E5-526C72ADFE34\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.5\",\"versionEndExcluding\":\"5.10.201\",\"matchCriteriaId\":\"AF1ADC4E-CCC4-498A-876F-5136DDD36C1D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.139\",\"matchCriteriaId\":\"81424D14-B38F-47B3-A1B8-BC3B60BB96EA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.63\",\"matchCriteriaId\":\"80E1EA7E-2788-466C-9FFB-34AFA1B052F0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.5.12\",\"matchCriteriaId\":\"825F64D9-E99F-49AA-8A7B-EF7C2965C5B2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.6\",\"versionEndExcluding\":\"6.6.2\",\"matchCriteriaId\":\"4CBFF885-A4D3-4F21-B6FD-4D770034C048\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/36d85fa7ae0d6be651c1a745191fa7ef055db43e\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/44a96796d25809502c75771d40ee693c2e44724e\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/9fb0eed09e1470cd4021ff52b2b9dfcbcee4c203\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/cf098e937dd125c0317a0d6f261ac2a950a233d6\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/d426a2955e45a95b2282764105fcfb110a540453\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/e0bf076b734a2fab92d8fddc2b8b03462eee7097\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/eba9ac7abab91c8f6d351460239108bef5e7a0b6\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/fb7b06b59c6887659c6ed0ecd3110835eecbb6a3\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/36d85fa7ae0d6be651c1a745191fa7ef055db43e\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/44a96796d25809502c75771d40ee693c2e44724e\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/9fb0eed09e1470cd4021ff52b2b9dfcbcee4c203\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/cf098e937dd125c0317a0d6f261ac2a950a233d6\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/d426a2955e45a95b2282764105fcfb110a540453\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/e0bf076b734a2fab92d8fddc2b8b03462eee7097\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/eba9ac7abab91c8f6d351460239108bef5e7a0b6\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/fb7b06b59c6887659c6ed0ecd3110835eecbb6a3\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-08-04T19:23:04+00:00",
      "cve": "CVE-2023-52864",
      "id": "CVE-2023-52864",
      "initial_release_date": "2023-01-01T00:00:00+00:00",
      "product_status:fixed": "927",
      "product_status:known_affected": "50",
      "product_status:known_not_affected": "25",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: platform/x86: wmi: Fix opening of char device",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-52864.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-04T00:31:41Z",
      "cve": "CVE-2023-52864",
      "id": "CVE-2023-52864",
      "initial_release_date": "2024-05-23T15:23:31Z",
      "product_status:known_affected": "409",
      "product_status:known_not_affected": "76",
      "product_status:recommended": "924",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2023-52864",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2023-52864.json",
      "version": "100"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://git.kernel.org/stable/c/cf098e937dd125c0317a0d6f261ac2a950a233d6\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/9fb0eed09e1470cd4021ff52b2b9dfcbcee4c203\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/d426a2955e45a95b2282764105fcfb110a540453\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/e0bf076b734a2fab92d8fddc2b8b03462eee7097\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/44a96796d25809502c75771d40ee693c2e44724e\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/36d85fa7ae0d6be651c1a745191fa7ef055db43e\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/fb7b06b59c6887659c6ed0ecd3110835eecbb6a3\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/eba9ac7abab91c8f6d351460239108bef5e7a0b6\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-02T23:11:36.054Z\"}}, {\"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2023-52864\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-05-22T18:21:10.578430Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-05-23T19:01:25.622Z\"}, \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"title\": \"platform/x86: wmi: Fix opening of char device\", \"metrics\": [{\"cvssV3_1\": {\"version\": \"3.1\", \"baseScore\": 7, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"AV:L - The bug is reached by opening the local misc char device `/dev/wmi/$driver` (typically `/dev/wmi/dell-smbios`): open \\u2192 misc_open \\u2192 wmi_char_open. There is no network or adjacent-link path into this platform/x86 WMI code.\\nAC:H - Memory corruption requires wmi_char_open() to fail its driver lookup while misc_open still succeeds, which the fix ties to wmi_free_devices() list_del before misc_deregister\\u2014i.e. concurrent ACPI/platform WMI removal (e.g. rmmod wmi). An unprivileged attacker can spam open/ioctl but cannot induce that privileged teardown, matching other module-unload races scored AC:H.\\nPR:L - The char device is registered with mode 0444, so any local unprivileged user can open it and issue read/ioctl; no init-namespace root or capability is required on the attacker\\u2019s side of the race.\\nUI:N - The attacker opens and operates on the WMI char device in their own process; no victim action is required. Concurrent administrative device removal is Attack Complexity, not User Interaction.\\nS:U - Type confusion / use-after-free stays inside the host kernel\\u2019s WMI/misc authority and does not cross a VM, IOMMU, or sandbox boundary.\\nC:H - Failed lookup leaves filp-\u003eprivate_data as a miscdevice* that read/ioctl treat as struct wmi_block, causing out-of-bounds reads of adjacent heap; if the wblock is freed while the fd is held this becomes a UAF disclosure primitive, scored High per kernel guidance.\\nI:H - The same type confusion/UAF makes wmi_ioctl() mutex_lock, dereference handler_data, and copy_from_user() through misinterpreted pointers\\u2014yielding heap corruption and an arbitrary-write primitive after reclaim, so Integrity is High.\\nA:H - Misinterpreting a miscdevice as a wmi_block (or using a freed wblock) reliably leads to invalid memory access, oops/panic, or hang on corrupted locks; any such kernel crash/UAF is Availability High.\"}]}], \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"44b6b7661132b1b0e5fd3147ded66f1e4a817ca9\", \"lessThan\": \"cf098e937dd125c0317a0d6f261ac2a950a233d6\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"44b6b7661132b1b0e5fd3147ded66f1e4a817ca9\", \"lessThan\": \"9fb0eed09e1470cd4021ff52b2b9dfcbcee4c203\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"44b6b7661132b1b0e5fd3147ded66f1e4a817ca9\", \"lessThan\": \"d426a2955e45a95b2282764105fcfb110a540453\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"44b6b7661132b1b0e5fd3147ded66f1e4a817ca9\", \"lessThan\": \"e0bf076b734a2fab92d8fddc2b8b03462eee7097\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"44b6b7661132b1b0e5fd3147ded66f1e4a817ca9\", \"lessThan\": \"44a96796d25809502c75771d40ee693c2e44724e\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"44b6b7661132b1b0e5fd3147ded66f1e4a817ca9\", \"lessThan\": \"36d85fa7ae0d6be651c1a745191fa7ef055db43e\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"44b6b7661132b1b0e5fd3147ded66f1e4a817ca9\", \"lessThan\": \"fb7b06b59c6887659c6ed0ecd3110835eecbb6a3\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"44b6b7661132b1b0e5fd3147ded66f1e4a817ca9\", \"lessThan\": \"eba9ac7abab91c8f6d351460239108bef5e7a0b6\", \"versionType\": \"git\"}], \"programFiles\": [\"drivers/platform/x86/wmi.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.15\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"4.15\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"4.19.299\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.19.*\"}, {\"status\": \"unaffected\", \"version\": \"5.4.261\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.4.*\"}, {\"status\": \"unaffected\", \"version\": \"5.10.201\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.10.*\"}, {\"status\": \"unaffected\", \"version\": \"5.15.139\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.15.*\"}, {\"status\": \"unaffected\", \"version\": \"6.1.63\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.1.*\"}, {\"status\": \"unaffected\", \"version\": \"6.5.12\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.5.*\"}, {\"status\": \"unaffected\", \"version\": \"6.6.2\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.6.*\"}, {\"status\": \"unaffected\", \"version\": \"6.7\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"drivers/platform/x86/wmi.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/cf098e937dd125c0317a0d6f261ac2a950a233d6\"}, {\"url\": \"https://git.kernel.org/stable/c/9fb0eed09e1470cd4021ff52b2b9dfcbcee4c203\"}, {\"url\": \"https://git.kernel.org/stable/c/d426a2955e45a95b2282764105fcfb110a540453\"}, {\"url\": \"https://git.kernel.org/stable/c/e0bf076b734a2fab92d8fddc2b8b03462eee7097\"}, {\"url\": \"https://git.kernel.org/stable/c/44a96796d25809502c75771d40ee693c2e44724e\"}, {\"url\": \"https://git.kernel.org/stable/c/36d85fa7ae0d6be651c1a745191fa7ef055db43e\"}, {\"url\": \"https://git.kernel.org/stable/c/fb7b06b59c6887659c6ed0ecd3110835eecbb6a3\"}, {\"url\": \"https://git.kernel.org/stable/c/eba9ac7abab91c8f6d351460239108bef5e7a0b6\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nplatform/x86: wmi: Fix opening of char device\\n\\nSince commit fa1f68db6ca7 (\\\"drivers: misc: pass miscdevice pointer via\\nfile private data\\\"), the miscdevice stores a pointer to itself inside\\nfilp-\u003eprivate_data, which means that private_data will not be NULL when\\nwmi_char_open() is called. This might cause memory corruption should\\nwmi_char_open() be unable to find its driver, something which can\\nhappen when the associated WMI device is deleted in wmi_free_devices().\\n\\nFix the problem by using the miscdevice pointer to retrieve the WMI\\ndevice data associated with a char device using container_of(). This\\nalso avoids wmi_char_open() picking a wrong WMI device bound to a\\ndriver with the same name as the original driver.\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.19.299\", \"versionStartIncluding\": \"4.15\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.4.261\", \"versionStartIncluding\": \"4.15\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.10.201\", \"versionStartIncluding\": \"4.15\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.15.139\", \"versionStartIncluding\": \"4.15\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.63\", \"versionStartIncluding\": \"4.15\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.5.12\", \"versionStartIncluding\": \"4.15\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.6.2\", \"versionStartIncluding\": \"4.15\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.7\", \"versionStartIncluding\": \"4.15\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2026-08-05T09:11:43.009Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2023-52864\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-08-05T09:11:43.009Z\", \"dateReserved\": \"2024-05-21T15:19:24.261Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-05-21T15:31:55.875Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.