VulnerabilityAnalyzed
CVE-2023-52675
In the Linux kernel, the following vulnerability has been resolved: powerpc/imc-pmu: Add a null pointer check in update_events_in_group() kasprintf() returns a pointer to dynamically allocated memory which can be NULL upon failure.
MEDIUM 5.5EPSS 0.27%
Does this matter?
Lower severity and a low EPSS score (0.27%). Track it; it rarely justifies an emergency change on its own.
Description
In the Linux kernel, the following vulnerability has been resolved: powerpc/imc-pmu: Add a null pointer check in update_events_in_group() kasprintf() returns a pointer to dynamically allocated memory which can be NULL upon failure.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.27% probability · 19th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-476
- Affected
- linux/linux kernel
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/024352f7928b28f53609660663329d8c0f4ad032Mailing List, Patch
- https://git.kernel.org/stable/c/0a233867a39078ebb0f575e2948593bbff5826b3Mailing List, Patch
- https://git.kernel.org/stable/c/1e80aa25d186a7aa212df5acd8c75f55ac8dae34Mailing List, Patch
- https://git.kernel.org/stable/c/5a669f3511d273c8c1ab1c1d268fbcdf53fc7a05Mailing List, Patch
- https://git.kernel.org/stable/c/75fc599bcdcb1de093c9ced2e3cccc832f3787f3Mailing List, Patch
- https://git.kernel.org/stable/c/a2da3f9b1a1019c887ee1d164475a8fcdb0a3fecMailing List, Patch
- https://git.kernel.org/stable/c/c7d828e12b326ea50fb80c369d7aa87519ed14c6Mailing List, Patch
- https://git.kernel.org/stable/c/f105c263009839d80fad6998324a4e1b3511cba0Mailing List, Patch
- https://git.kernel.org/stable/c/024352f7928b28f53609660663329d8c0f4ad032Mailing List, Patch
- https://git.kernel.org/stable/c/0a233867a39078ebb0f575e2948593bbff5826b3Mailing List, Patch
- https://git.kernel.org/stable/c/1e80aa25d186a7aa212df5acd8c75f55ac8dae34Mailing List, Patch
- https://git.kernel.org/stable/c/5a669f3511d273c8c1ab1c1d268fbcdf53fc7a05Mailing List, Patch
- https://git.kernel.org/stable/c/75fc599bcdcb1de093c9ced2e3cccc832f3787f3Mailing List, Patch
- https://git.kernel.org/stable/c/a2da3f9b1a1019c887ee1d164475a8fcdb0a3fecMailing List, Patch
- https://git.kernel.org/stable/c/c7d828e12b326ea50fb80c369d7aa87519ed14c6Mailing List, Patch
- https://git.kernel.org/stable/c/f105c263009839d80fad6998324a4e1b3511cba0Mailing List, Patch
- https://lists.debian.org/debian-lts-announce/2024/06/msg00016.htmlMailing List
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.