CVE-2023-52686
IBM PowerNV Kernel Null Pointer Dereference Vulnerability
Description
In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv: Add a null pointer check in opal_event_init() kasprintf() returns a pointer to dynamically allocated memory which can be NULL upon failure.
INFO
Published Date :
May 17, 2024, 3:15 p.m.
Last Modified :
Nov. 21, 2024, 8:40 a.m.
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Remotely Exploitable :
No
Impact Score :
Exploitability Score :
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2023-52686.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2023-52686 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2023-52686 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
Initial Analysis by [email protected]
Mar. 04, 2025
Action Type Old Value New Value Added CVSS V3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Added CWE CWE-476 Added CPE Configuration OR *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.16 from (excluding) 6.1.75 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.2 from (excluding) 6.6.14 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.7 from (excluding) 6.7.2 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 4.20 from (excluding) 5.4.268 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.11 from (excluding) 5.15.148 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.5 from (excluding) 5.10.209 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 4.11 from (excluding) 4.19.306 Added CPE Configuration OR *cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* Added Reference Type CVE: https://git.kernel.org/stable/c/8422d179cf46889c15ceff9ede48c5bfa4e7f0b4 Types: Mailing List, Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/8422d179cf46889c15ceff9ede48c5bfa4e7f0b4 Types: Mailing List, Patch Added Reference Type CVE: https://git.kernel.org/stable/c/8649829a1dd25199bbf557b2621cedb4bf9b3050 Types: Mailing List, Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/8649829a1dd25199bbf557b2621cedb4bf9b3050 Types: Mailing List, Patch Added Reference Type CVE: https://git.kernel.org/stable/c/9a523e1da6d88c2034f946adfa4f74b236c95ca9 Types: Mailing List, Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/9a523e1da6d88c2034f946adfa4f74b236c95ca9 Types: Mailing List, Patch Added Reference Type CVE: https://git.kernel.org/stable/c/a14c55eb461d630b836f80591d8caf1f74e62877 Types: Mailing List, Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/a14c55eb461d630b836f80591d8caf1f74e62877 Types: Mailing List, Patch Added Reference Type CVE: https://git.kernel.org/stable/c/c0b111ea786ddcc8be0682612830796ece9436c7 Types: Mailing List, Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/c0b111ea786ddcc8be0682612830796ece9436c7 Types: Mailing List, Patch Added Reference Type CVE: https://git.kernel.org/stable/c/e08c2e275fa1874de945b87093f925997722ee42 Types: Mailing List, Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/e08c2e275fa1874de945b87093f925997722ee42 Types: Mailing List, Patch Added Reference Type CVE: https://git.kernel.org/stable/c/e6ad05e3ae9c84c5a71d7bb2d44dc845ae7990cf Types: Mailing List, Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/e6ad05e3ae9c84c5a71d7bb2d44dc845ae7990cf Types: Mailing List, Patch Added Reference Type CVE: https://git.kernel.org/stable/c/e93d7cf4c1ddbcd846739e7ad849f955a4f18031 Types: Mailing List, Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/e93d7cf4c1ddbcd846739e7ad849f955a4f18031 Types: Mailing List, Patch Added Reference Type CVE: https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html Types: Mailing List -
CVE Modified by af854a3a-2127-422b-91ae-364da2661108
Nov. 21, 2024
Action Type Old Value New Value Added Reference https://git.kernel.org/stable/c/8422d179cf46889c15ceff9ede48c5bfa4e7f0b4 Added Reference https://git.kernel.org/stable/c/8649829a1dd25199bbf557b2621cedb4bf9b3050 Added Reference https://git.kernel.org/stable/c/9a523e1da6d88c2034f946adfa4f74b236c95ca9 Added Reference https://git.kernel.org/stable/c/a14c55eb461d630b836f80591d8caf1f74e62877 Added Reference https://git.kernel.org/stable/c/c0b111ea786ddcc8be0682612830796ece9436c7 Added Reference https://git.kernel.org/stable/c/e08c2e275fa1874de945b87093f925997722ee42 Added Reference https://git.kernel.org/stable/c/e6ad05e3ae9c84c5a71d7bb2d44dc845ae7990cf Added Reference https://git.kernel.org/stable/c/e93d7cf4c1ddbcd846739e7ad849f955a4f18031 Added Reference https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html -
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Nov. 04, 2024
Action Type Old Value New Value Removed Reference kernel.org https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html -
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Jun. 25, 2024
Action Type Old Value New Value Added Reference kernel.org https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html [No types assigned] -
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
May. 29, 2024
Action Type Old Value New Value -
CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
May. 17, 2024
Action Type Old Value New Value Added Description In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv: Add a null pointer check in opal_event_init() kasprintf() returns a pointer to dynamically allocated memory which can be NULL upon failure. Added Reference kernel.org https://git.kernel.org/stable/c/8422d179cf46889c15ceff9ede48c5bfa4e7f0b4 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/e93d7cf4c1ddbcd846739e7ad849f955a4f18031 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/e6ad05e3ae9c84c5a71d7bb2d44dc845ae7990cf [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/c0b111ea786ddcc8be0682612830796ece9436c7 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/9a523e1da6d88c2034f946adfa4f74b236c95ca9 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/a14c55eb461d630b836f80591d8caf1f74e62877 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/e08c2e275fa1874de945b87093f925997722ee42 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/8649829a1dd25199bbf557b2621cedb4bf9b3050 [No types assigned]
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2023-52686 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2023-52686
weaknesses.