CVE-2023-52467

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-52467
In the Linux kernel, the following vulnerability has been resolved: mfd: syscon: Fix null pointer dereference in of_syscon_register() kasprintf() returns a pointer to dynamically allocated memory which can be NULL upon failure.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/3ef1130deee98997275904d9bfc37af75e1e906c Patch
https://git.kernel.org/stable/c/41673c66b3d0c09915698fec5c13b24336f18dd1 Patch
https://git.kernel.org/stable/c/527e8c5f3d00299822612c495d5adf1f8f43c001 Patch
https://git.kernel.org/stable/c/7f2c410ac470959b88e03dadd94b7a0b71df7973 Patch
https://git.kernel.org/stable/c/927626a2073887ee30ba00633260d4d203f8e875 Patch
https://git.kernel.org/stable/c/c3e3a2144bf50877551138ffce9f7aa6ddfe385b Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

17 Apr 2024, 19:14

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: mfd: syscon: corrige la desreferencia del puntero nulo en of_syscon_register() kasprintf() devuelve un puntero a la memoria asignada dinámicamente que puede ser NULL en caso de falla.
References () https://git.kernel.org/stable/c/3ef1130deee98997275904d9bfc37af75e1e906c - () https://git.kernel.org/stable/c/3ef1130deee98997275904d9bfc37af75e1e906c - Patch
References () https://git.kernel.org/stable/c/41673c66b3d0c09915698fec5c13b24336f18dd1 - () https://git.kernel.org/stable/c/41673c66b3d0c09915698fec5c13b24336f18dd1 - Patch
References () https://git.kernel.org/stable/c/527e8c5f3d00299822612c495d5adf1f8f43c001 - () https://git.kernel.org/stable/c/527e8c5f3d00299822612c495d5adf1f8f43c001 - Patch
References () https://git.kernel.org/stable/c/7f2c410ac470959b88e03dadd94b7a0b71df7973 - () https://git.kernel.org/stable/c/7f2c410ac470959b88e03dadd94b7a0b71df7973 - Patch
References () https://git.kernel.org/stable/c/927626a2073887ee30ba00633260d4d203f8e875 - () https://git.kernel.org/stable/c/927626a2073887ee30ba00633260d4d203f8e875 - Patch
References () https://git.kernel.org/stable/c/c3e3a2144bf50877551138ffce9f7aa6ddfe385b - () https://git.kernel.org/stable/c/c3e3a2144bf50877551138ffce9f7aa6ddfe385b - Patch
First Time Linux
Linux linux Kernel
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE CWE-476

26 Feb 2024, 16:32

Type Values Removed Values Added
New CVE
Information

Published : 2024-02-26 16:27

Updated : 2024-04-17 19:14

NVD link : CVE-2023-52467

Mitre link : CVE-2023-52467

CVE.ORG link : CVE-2023-52467

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference