CVE-2023-52690

Katalog CVE

CVSS 5.5 · Medium EPSS 0,23%

Kerentanan NULL Pointer Dereference pada linux kernel, debian linux. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv: Add a null pointer check to scom_debug_init_one() kasprintf() returns a pointer to dynamically allocated memory which can be NULL upon failure. Add a null pointer check, and release 'ent' to avoid memory leaks.

Rincian

Terbit di NVD

17 Mei 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-476: NULL Pointer Dereference

EPSS (30 hari)

0,23% peluang dieksploitasi; lebih tinggi dari 12,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/1eefa93faf69188540b08b024794fa90b1d82e8b mailing list · patch
• https://git.kernel.org/stable/c/2a82c4439b903639e0a1f21990cd399fb0a49c19 mailing list · patch
• https://git.kernel.org/stable/c/9a260f2dd827bbc82cc60eb4f4d8c22707d80742 mailing list · patch
• https://git.kernel.org/stable/c/a9c05cbb6644a2103c75b6906e9dafb9981ebd13 mailing list · patch
• https://git.kernel.org/stable/c/dd8422ff271c22058560832fc3006324ded895a9 mailing list · patch
• https://git.kernel.org/stable/c/ed8d023cfa97b559db58c0e1afdd2eec7a83d8f2 mailing list · patch
• https://git.kernel.org/stable/c/f84c1446daa552e9699da8d1f8375eac0f65edc7 mailing list · patch
• https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html mailing list