Redhat.comRH:CVE-2023-52467CVE-2023-52467
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
AI Score
Confidence
Low
EPSS
Percentile
5.1%
A vulnerability was found in the Linux kernel, where A NULL pointer dereference flaw may occur in _syscon_register(). In this issue, kasprintf() returns a pointer to dynamically allocated memory, which can be NULL upon failure.
References
bugzilla.redhat.com/show_bug.cgi?id=2266212
git.kernel.org/stable/c/3ef1130deee98997275904d9bfc37af75e1e906c
git.kernel.org/stable/c/41673c66b3d0c09915698fec5c13b24336f18dd1
git.kernel.org/stable/c/527e8c5f3d00299822612c495d5adf1f8f43c001
git.kernel.org/stable/c/7f2c410ac470959b88e03dadd94b7a0b71df7973
git.kernel.org/stable/c/927626a2073887ee30ba00633260d4d203f8e875
git.kernel.org/stable/c/c3e3a2144bf50877551138ffce9f7aa6ddfe385b
nvd.nist.gov/vuln/detail/CVE-2023-52467
www.cve.org/CVERecord?id=CVE-2023-52467
Related
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
AI Score
Confidence
Low
EPSS
Percentile
5.1%