CVE-2023-52686
MEDIUMLinux Kernel 4.11-4.19.305 - NULL Pointer Dereference in opal_event_init()
Title source: llmDescription
In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv: Add a null pointer check in opal_event_init() kasprintf() returns a pointer to dynamically allocated memory which can be NULL upon failure.
References (9)
Core 9
Core References
Mailing List, Patch
https://git.kernel.org/stable/c/8422d179cf46889c15ceff9ede48c5bfa4e7f0b4
Mailing List, Patch
https://git.kernel.org/stable/c/e93d7cf4c1ddbcd846739e7ad849f955a4f18031
Mailing List, Patch
https://git.kernel.org/stable/c/e6ad05e3ae9c84c5a71d7bb2d44dc845ae7990cf
Mailing List, Patch
https://git.kernel.org/stable/c/c0b111ea786ddcc8be0682612830796ece9436c7
Mailing List, Patch
https://git.kernel.org/stable/c/9a523e1da6d88c2034f946adfa4f74b236c95ca9
Mailing List, Patch
https://git.kernel.org/stable/c/a14c55eb461d630b836f80591d8caf1f74e62877
Mailing List, Patch
https://git.kernel.org/stable/c/e08c2e275fa1874de945b87093f925997722ee42
Mailing List, Patch
https://git.kernel.org/stable/c/8649829a1dd25199bbf557b2621cedb4bf9b3050
Scores
CVSS v3
5.5
EPSS
0.0026
EPSS Percentile
17.5%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-476
Status
published
Products (27)
debian/debian_linux
10.0
linux/Kernel
4.11.0 - 4.19.306linux
linux/Kernel
4.20.0 - 5.4.268linux
linux/Kernel
5.11.0 - 5.15.148linux
linux/Kernel
5.16.0 - 6.1.75linux
linux/Kernel
5.5.0 - 5.10.209linux
linux/Kernel
6.2.0 - 6.6.14linux
linux/Kernel
6.7.0 - 6.7.2linux
Linux/Linux
< 4.11
Linux/Linux
2717a33d60745f2f72e521cdaedf79b00f66f8ca - 8422d179cf46889c15ceff9ede48c5bfa4e7f0b4
... and 17 more
Published
May 17, 2024
Tracked Since
Feb 18, 2026