{
  "schemaVersion": 1,
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "record": {
    "id": "CVE-2023-52449",
    "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2023-52449",
    "idYear": 2023,
    "status": "PUBLISHED",
    "publishedAt": "2024-02-22T16:21:40.841Z",
    "updatedAt": "2026-05-11T19:27:32.900Z",
    "importedAt": "2026-10-24T01:57:03.413Z",
    "snapshot": {
      "id": "cve_2026-10-24_midnight_baseline",
      "at": "2026-10-24T00:00:00.000Z",
      "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z"
    },
    "facts": {
      "title": "mtd: Fix gluebi NULL pointer dereference caused by ftl notifier",
      "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nmtd: Fix gluebi NULL pointer dereference caused by ftl notifier\n\nIf both ftl.ko and gluebi.ko are loaded, the notifier of ftl\ntriggers NULL pointer dereference when trying to access\n‘gluebi->desc’ in gluebi_read().\n\nubi_gluebi_init\n  ubi_register_volume_notifier\n    ubi_enumerate_volumes\n      ubi_notify_all\n        gluebi_notify    nb->notifier_call()\n          gluebi_create\n            mtd_device_register\n              mtd_device_parse_register\n                add_mtd_device\n                  blktrans_notify_add   not->add()\n                    ftl_add_mtd         tr->add_mtd()\n                      scan_header\n                        mtd_read\n                          mtd_read_oob\n                            mtd_read_oob_std\n                              gluebi_read   mtd->read()\n                                gluebi->desc - NULL\n\nDetailed reproduction information available at the Link [1],\n\nIn the normal case, obtain gluebi->desc in the gluebi_get_device(),\nand access gluebi->desc in the gluebi_read(). However,\ngluebi_get_device() is not executed in advance in the\nftl_add_mtd() process, which leads to NULL pointer dereference.\n\nThe solution for the gluebi module is to run jffs2 on the UBI\nvolume without considering working with ftl or mtdblock [2].\nTherefore, this problem can be avoided by preventing gluebi from\ncreating the mtdblock device after creating mtd partition of the\ntype MTD_UBIVOLUME.",
      "affected": [
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "2ba3d76a1e29f2ba64fbc762875cf9fb2d4ba2ba",
              "status": "affected",
              "versionType": "git",
              "lessThan": "aeba358bcc8ffddf9b4a9bd0e5ec9eb338d46022"
            },
            {
              "version": "2ba3d76a1e29f2ba64fbc762875cf9fb2d4ba2ba",
              "status": "affected",
              "versionType": "git",
              "lessThan": "1bf4fe14e97cda621522eb2f28b0a4e87c5b0745"
            },
            {
              "version": "2ba3d76a1e29f2ba64fbc762875cf9fb2d4ba2ba",
              "status": "affected",
              "versionType": "git",
              "lessThan": "001a3f59d8c914ef8273461d4bf495df384cc5f8"
            },
            {
              "version": "2ba3d76a1e29f2ba64fbc762875cf9fb2d4ba2ba",
              "status": "affected",
              "versionType": "git",
              "lessThan": "d8ac2537763b54d278b80b2b080e1652523c7d4c"
            },
            {
              "version": "2ba3d76a1e29f2ba64fbc762875cf9fb2d4ba2ba",
              "status": "affected",
              "versionType": "git",
              "lessThan": "5389407bba1eab1266c6d83e226fb0840cb98dd5"
            },
            {
              "version": "2ba3d76a1e29f2ba64fbc762875cf9fb2d4ba2ba",
              "status": "affected",
              "versionType": "git",
              "lessThan": "cfd7c9d260dc0a3baaea05a122a19ab91e193c65"
            },
            {
              "version": "2ba3d76a1e29f2ba64fbc762875cf9fb2d4ba2ba",
              "status": "affected",
              "versionType": "git",
              "lessThan": "b36aaa64d58aaa2f2cbc8275e89bae76a2b6c3dc"
            },
            {
              "version": "2ba3d76a1e29f2ba64fbc762875cf9fb2d4ba2ba",
              "status": "affected",
              "versionType": "git",
              "lessThan": "a43bdc376deab5fff1ceb93dca55bcab8dbdc1d6"
            }
          ]
        },
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "affected",
          "versions": [
            {
              "version": "2.6.31",
              "status": "affected"
            },
            {
              "version": "0",
              "status": "unaffected",
              "versionType": "semver",
              "lessThan": "2.6.31"
            },
            {
              "version": "4.19.306",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "4.19.*"
            },
            {
              "version": "5.4.268",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.4.*"
            },
            {
              "version": "5.10.209",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.10.*"
            },
            {
              "version": "5.15.148",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.15.*"
            },
            {
              "version": "6.1.75",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.*"
            },
            {
              "version": "6.6.14",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.6.*"
            },
            {
              "version": "6.7.2",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.7.*"
            },
            {
              "version": "6.8",
              "status": "unaffected",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ]
        }
      ]
    }
  }
}