CVE-2023-52686

Katalog CVE

CVSS 5.5 · Medium EPSS 0,25%

Kerentanan NULL Pointer Dereference pada linux kernel, debian linux. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv: Add a null pointer check in opal_event_init() kasprintf() returns a pointer to dynamically allocated memory which can be NULL upon failure.

Rincian

Terbit di NVD

17 Mei 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-476: NULL Pointer Dereference

EPSS (30 hari)

0,25% peluang dieksploitasi; lebih tinggi dari 15,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/8422d179cf46889c15ceff9ede48c5bfa4e7f0b4 mailing list · patch
• https://git.kernel.org/stable/c/8649829a1dd25199bbf557b2621cedb4bf9b3050 mailing list · patch
• https://git.kernel.org/stable/c/9a523e1da6d88c2034f946adfa4f74b236c95ca9 mailing list · patch
• https://git.kernel.org/stable/c/a14c55eb461d630b836f80591d8caf1f74e62877 mailing list · patch
• https://git.kernel.org/stable/c/c0b111ea786ddcc8be0682612830796ece9436c7 mailing list · patch
• https://git.kernel.org/stable/c/e08c2e275fa1874de945b87093f925997722ee42 mailing list · patch
• https://git.kernel.org/stable/c/e6ad05e3ae9c84c5a71d7bb2d44dc845ae7990cf mailing list · patch
• https://git.kernel.org/stable/c/e93d7cf4c1ddbcd846739e7ad849f955a4f18031 mailing list · patch
• https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html mailing list