Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2023-52450
HistoryFeb 22, 2024 - 4:21 p.m.

CVE-2023-52450 perf/x86/intel/uncore: Fix NULL pointer dereference issue in upi_fill_topology()

2024-02-2216:21:41
Linux
github.com
1
linux kernel
null pointer dereference
upi_fill_topology

AI Score

6.5

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

perf/x86/intel/uncore: Fix NULL pointer dereference issue in upi_fill_topology()

Get logical socket id instead of physical id in discover_upi_topology()
to avoid out-of-bound access on ‘upi = &type->topology[nid][idx];’ line
that leads to NULL pointer dereference in upi_fill_topology()

AI Score

6.5

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial