CVE-2023-52467

MEDIUM

Linux Kernel 5.9.0-5.10.209 - Null Pointer Dereference in of_syscon_register()

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: mfd: syscon: Fix null pointer dereference in of_syscon_register() kasprintf() returns a pointer to dynamically allocated memory which can be NULL upon failure.

References (7)

Core 7

Scores

CVSS v3 5.5
EPSS 0.0028
EPSS Percentile 19.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-476
Status published
Products (15)
Linux/Linux < 5.9
Linux/Linux 5.10.209 - 5.10.*
Linux/Linux 5.15.148 - 5.15.*
Linux/Linux 5.9
Linux/Linux 6.1.75 - 6.1.*
Linux/Linux 6.6.14 - 6.6.*
Linux/Linux 6.7.2 - 6.7.*
Linux/Linux 6.8
Linux/Linux e15d7f2b81d2e7d93115d46fa931b366c1cdebc2 - 3ef1130deee98997275904d9bfc37af75e1e906c
Linux/Linux e15d7f2b81d2e7d93115d46fa931b366c1cdebc2 - 41673c66b3d0c09915698fec5c13b24336f18dd1
... and 5 more
Published Feb 26, 2024
Tracked Since Feb 18, 2026