VulnerabilityAnalyzed
CVE-2023-52686
In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv: Add a null pointer check in opal_event_init() kasprintf() returns a pointer to dynamically allocated memory which can be NULL upon failure.
MEDIUM 5.5EPSS 0.25%
Does this matter?
Lower severity and a low EPSS score (0.25%). Track it; it rarely justifies an emergency change on its own.
Description
In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv: Add a null pointer check in opal_event_init() kasprintf() returns a pointer to dynamically allocated memory which can be NULL upon failure.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.25% probability · 17th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-476
- Affected
- linux/linux kernel · debian/debian linux
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/8422d179cf46889c15ceff9ede48c5bfa4e7f0b4Mailing List, Patch
- https://git.kernel.org/stable/c/8649829a1dd25199bbf557b2621cedb4bf9b3050Mailing List, Patch
- https://git.kernel.org/stable/c/9a523e1da6d88c2034f946adfa4f74b236c95ca9Mailing List, Patch
- https://git.kernel.org/stable/c/a14c55eb461d630b836f80591d8caf1f74e62877Mailing List, Patch
- https://git.kernel.org/stable/c/c0b111ea786ddcc8be0682612830796ece9436c7Mailing List, Patch
- https://git.kernel.org/stable/c/e08c2e275fa1874de945b87093f925997722ee42Mailing List, Patch
- https://git.kernel.org/stable/c/e6ad05e3ae9c84c5a71d7bb2d44dc845ae7990cfMailing List, Patch
- https://git.kernel.org/stable/c/e93d7cf4c1ddbcd846739e7ad849f955a4f18031Mailing List, Patch
- https://git.kernel.org/stable/c/8422d179cf46889c15ceff9ede48c5bfa4e7f0b4Mailing List, Patch
- https://git.kernel.org/stable/c/8649829a1dd25199bbf557b2621cedb4bf9b3050Mailing List, Patch
- https://git.kernel.org/stable/c/9a523e1da6d88c2034f946adfa4f74b236c95ca9Mailing List, Patch
- https://git.kernel.org/stable/c/a14c55eb461d630b836f80591d8caf1f74e62877Mailing List, Patch
- https://git.kernel.org/stable/c/c0b111ea786ddcc8be0682612830796ece9436c7Mailing List, Patch
- https://git.kernel.org/stable/c/e08c2e275fa1874de945b87093f925997722ee42Mailing List, Patch
- https://git.kernel.org/stable/c/e6ad05e3ae9c84c5a71d7bb2d44dc845ae7990cfMailing List, Patch
- https://git.kernel.org/stable/c/e93d7cf4c1ddbcd846739e7ad849f955a4f18031Mailing List, Patch
- https://lists.debian.org/debian-lts-announce/2024/06/msg00016.htmlMailing List
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.