A memory leak flaw and potential divide by zero and Integer overflow was found in the Linux kernel V4L2 and vivid test code functionality. This issue occurs when a user triggers ioctls, such as VIDIOC_S_DV_TIMINGS ioctl. This could allow a local user to crash the system if vivid test code enabled.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A memory leak flaw and potential divide by zero and Integer overflow was found in the Linux kernel V4L2     and vivid test code functionality. This issue occurs when a user triggers ioctls, such as     VIDIOC_S_DV_TIMINGS ioctl. This could allow a local user to crash the system if vivid test code enabled.
    (CVE-2023-0615)

Note that Nessus relies on the presence of the package as reported by the vendor.

An update of the linux package has been released.

ID	Name	Product	Family	Severity
243872	Linux Distros Unpatched Vulnerability : CVE-2023-0615	Nessus	Misc.	medium
236373	Alibaba Cloud Linux 3 : 0136: cloud-kernel bugfix, enhancement and (ALINUX3-SA-2023:0136)	Nessus	Alibaba Cloud Linux Local Security Checks	critical
236061	Alibaba Cloud Linux 3 : 0149: cloud-kernel bugfix, enhancement and (ALINUX3-SA-2024:0149)	Nessus	Alibaba Cloud Linux Local Security Checks	critical
233768	Photon OS 5.0: Linux PHSA-2025-5.0-0491	Nessus	PhotonOS Local Security Checks	high
151965	Photon OS 4.0: Linux PHSA-2021-4.0-0065	Nessus	PhotonOS Local Security Checks	high

Detections

Analytics

CVE-2023-0615

medium

Tenable Plugins

medium

critical

critical

high

high