CVE-2023-52467

2024-02-2600:00:00

ubuntu.com

linux kernel

vulnerability

cve-2023-52467

mfd

syscon

null pointer dereference

memory allocation

kasprintf

launchpad

unix

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

5.2

Confidence

High

EPSS

Percentile

5.1%

JSON

In the Linux kernel, the following vulnerability has been resolved: mfd:
syscon: Fix null pointer dereference in of_syscon_register() kasprintf()
returns a pointer to dynamically allocated memory which can be NULL upon
failure.

Notes

Author	Note
	Priority reason: NULL pointer dereference on memory allocation failure which is very unlikely for an attacker to be able to influence and hence cause.
rodrigo-zaiden	USN-6765-1 for linux-oem-6.5 wrongly stated that this CVE was fixed in version 6.5.0-1022.23. The mentioned notice was revoked and the state of the fix for linux-oem-6.5 was recovered to the previous state.

OSVersionArchitecturePackageVersionFilename
ubuntu22.04noarchlinux< 5.15.0-102.112UNKNOWN
ubuntu23.10noarchlinux< 6.5.0-41.41UNKNOWN
ubuntu22.04noarchlinux-aws< 5.15.0-1057.63UNKNOWN
ubuntu23.10noarchlinux-aws< 6.5.0-1021.21UNKNOWN
ubuntu20.04noarchlinux-aws-5.15< 5.15.0-1057.63~20.04.1UNKNOWN
ubuntu22.04noarchlinux-aws-6.5< anyUNKNOWN
ubuntu22.04noarchlinux-azure< 5.15.0-1060.69UNKNOWN
ubuntu23.10noarchlinux-azure< 6.5.0-1022.23UNKNOWN
ubuntu20.04noarchlinux-azure-5.15< 5.15.0-1060.69~20.04.1UNKNOWN
ubuntu22.04noarchlinux-azure-6.5< 6.5.0-1022.23~22.04.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	22.04	noarch	linux	< 5.15.0-102.112	UNKNOWN
ubuntu	23.10	noarch	linux	< 6.5.0-41.41	UNKNOWN
ubuntu	22.04	noarch	linux-aws	< 5.15.0-1057.63	UNKNOWN
ubuntu	23.10	noarch	linux-aws	< 6.5.0-1021.21	UNKNOWN
ubuntu	20.04	noarch	linux-aws-5.15	< 5.15.0-1057.63~20.04.1	UNKNOWN
ubuntu	22.04	noarch	linux-aws-6.5	< any	UNKNOWN
ubuntu	22.04	noarch	linux-azure	< 5.15.0-1060.69	UNKNOWN
ubuntu	23.10	noarch	linux-azure	< 6.5.0-1022.23	UNKNOWN
ubuntu	20.04	noarch	linux-azure-5.15	< 5.15.0-1060.69~20.04.1	UNKNOWN
ubuntu	22.04	noarch	linux-azure-6.5	< 6.5.0-1022.23~22.04.1	UNKNOWN