CISA-2023-52696 — Vulnetix

CISA-2023-52696 PUBLISHED CVSS 7.5 HIGH

Reported by Linux · Published May 17, 2024

In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv: Add a null pointer check in opal_powercap_init() kasprintf() returns a pointer to dynamically allocated memory which can be NULL upon failure.

Risk Scores

CVSS 3.1

7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

Vendor	Product	Versions
Linux	Linux	b9ef7b4b867f56114bedbe6bf104cfaba0ca818e, b9ef7b4b867f56114bedbe6bf104cfaba0ca818e, b9ef7b4b867f56114bedbe6bf104cfaba0ca818e
Linux	Linux	4.20, 0, 5.4.268
linux	linux_kernel	b9ef7b4b867f, b9ef7b4b867f, b9ef7b4b867f
Linux	Linux	b9ef7b4b867f56114bedbe6bf104cfaba0ca818e, b9ef7b4b867f56114bedbe6bf104cfaba0ca818e, b9ef7b4b867f56114bedbe6bf104cfaba0ca818e

Timeline

May 17, 2024 CVE Published
Jan 16, 2025 CVE Updated

References

https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html url

Open in Interactive Console →