CVE-2023-52869

MEDIUM

Linux Kernel 5.8-5.10.200 - NULL Pointer Dereference in pstore/platform

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: pstore/platform: Add check for kstrdup Add check for the return value of kstrdup() and return the error if it fails in order to avoid NULL pointer dereference.

References (6)

Core 6

Core References

Patch

https://git.kernel.org/stable/c/bb166bdae1a7d7db30e9be7e6ccaba606debc05f

Patch

https://git.kernel.org/stable/c/379b120e4f27fd1cf636a5f85570c4d240a3f688

Patch

https://git.kernel.org/stable/c/63f637309baadf81a095f2653e3b807d4b5814b9

Patch

https://git.kernel.org/stable/c/1c426da79f9fc7b761021b5eb44185ba119cd44a

Patch

https://git.kernel.org/stable/c/ad5cb6deb41417ef41b9d6ff54f789212108606f

Patch

https://git.kernel.org/stable/c/a19d48f7c5d57c0f0405a7d4334d1d38fe9d3c1c

Scores

CVSS v3 5.5

EPSS 0.0022

EPSS Percentile 12.8%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-476

Status published

Products (15)

Linux/Linux < 5.8

Linux/Linux 5.10.201 - 5.10.*

Linux/Linux 5.15.139 - 5.15.*

Linux/Linux 5.8

Linux/Linux 563ca40ddf400dbf8c6254077f9b6887101d0f08 - 1c426da79f9fc7b761021b5eb44185ba119cd44a

Linux/Linux 563ca40ddf400dbf8c6254077f9b6887101d0f08 - 379b120e4f27fd1cf636a5f85570c4d240a3f688

Linux/Linux 563ca40ddf400dbf8c6254077f9b6887101d0f08 - 63f637309baadf81a095f2653e3b807d4b5814b9

Linux/Linux 563ca40ddf400dbf8c6254077f9b6887101d0f08 - a19d48f7c5d57c0f0405a7d4334d1d38fe9d3c1c

Linux/Linux 563ca40ddf400dbf8c6254077f9b6887101d0f08 - ad5cb6deb41417ef41b9d6ff54f789212108606f

Linux/Linux 563ca40ddf400dbf8c6254077f9b6887101d0f08 - bb166bdae1a7d7db30e9be7e6ccaba606debc05f

... and 5 more

Published May 21, 2024

Tracked Since Feb 18, 2026