Redhat.comRH:CVE-2023-52465CVE-2023-52465
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
6.4 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
A NULL pointer flaw was found in the Linux kernel. In this flaw, devm_kasprintf and devm_kzalloc return a pointer to dynamically allocated memory, which can be NULL upon failure.
References
bugzilla.redhat.com/show_bug.cgi?id=2266207
git.kernel.org/stable/c/88f04bc3e737155e13caddf0ba8ed19db87f0212
git.kernel.org/stable/c/bd3d2ec447ede9da822addf3960a5f4275e3ae76
git.kernel.org/stable/c/e2717302fbc20f148bcda362facee0444b949a3a
nvd.nist.gov/vuln/detail/CVE-2023-52465
www.cve.org/CVERecord?id=CVE-2023-52465
Related
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
6.4 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%