CVE-2023-52675CWE-476

CVE-2023-52675

Medium · published May 17, 2024

CVSS v3.1
5.5
EPSS
0%
Percentile
19.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

powerpc/imc-pmu: Add a null pointer check in update_events_in_group()

kasprintf() returns a pointer to dynamically allocated memory

which can be NULL upon failure.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00279 · 19.3th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2024-05-17T19:15Z
Affected products (7)
ProductVersionsFixed in
linux/linux_kernel≥ 4.14, < 4.19.3064.19.306
linux/linux_kernel≥ 4.20, < 5.4.2685.4.268
linux/linux_kernel≥ 5.5, < 5.10.2095.10.209
linux/linux_kernel≥ 5.11, < 5.15.1485.15.148
linux/linux_kernel≥ 5.16, < 6.1.756.1.75
linux/linux_kernel≥ 6.2, < 6.6.146.6.14
linux/linux_kernel≥ 6.7, < 6.7.26.7.2
References (18)
https://git.kernel.org/stable/c/024352f7928b28f53609660663329d8c0f4ad032 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/0a233867a39078ebb0f575e2948593bbff5826b3 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/1e80aa25d186a7aa212df5acd8c75f55ac8dae34 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/5a669f3511d273c8c1ab1c1d268fbcdf53fc7a05 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/75fc599bcdcb1de093c9ced2e3cccc832f3787f3 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/a2da3f9b1a1019c887ee1d164475a8fcdb0a3fec · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/c7d828e12b326ea50fb80c369d7aa87519ed14c6 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/f105c263009839d80fad6998324a4e1b3511cba0 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/024352f7928b28f53609660663329d8c0f4ad032 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/0a233867a39078ebb0f575e2948593bbff5826b3 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/1e80aa25d186a7aa212df5acd8c75f55ac8dae34 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/5a669f3511d273c8c1ab1c1d268fbcdf53fc7a05 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/75fc599bcdcb1de093c9ced2e3cccc832f3787f3 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/a2da3f9b1a1019c887ee1d164475a8fcdb0a3fec · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/c7d828e12b326ea50fb80c369d7aa87519ed14c6 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/f105c263009839d80fad6998324a4e1b3511cba0 · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-398330.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 17 MAY 14:24Z
    powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
    cvelistv5