CVE-2023-52467

Summary

In the Linux kernel, the following vulnerability has been resolved:

mfd: syscon: Fix null pointer dereference in of_syscon_register()

kasprintf() returns a pointer to dynamically allocated memory which can be NULL upon failure.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxe15d7f2b81d2e7d93115d46fa931b366c1cdebc2 < 927626a2073887ee30ba00633260d4d203f8e875affected
LinuxLinuxe15d7f2b81d2e7d93115d46fa931b366c1cdebc2 < c3e3a2144bf50877551138ffce9f7aa6ddfe385baffected
LinuxLinuxe15d7f2b81d2e7d93115d46fa931b366c1cdebc2 < 527e8c5f3d00299822612c495d5adf1f8f43c001affected
LinuxLinuxe15d7f2b81d2e7d93115d46fa931b366c1cdebc2 < 3ef1130deee98997275904d9bfc37af75e1e906caffected
LinuxLinuxe15d7f2b81d2e7d93115d46fa931b366c1cdebc2 < 7f2c410ac470959b88e03dadd94b7a0b71df7973affected
LinuxLinuxe15d7f2b81d2e7d93115d46fa931b366c1cdebc2 < 41673c66b3d0c09915698fec5c13b24336f18dd1affected
LinuxLinux5.9affected
LinuxLinux0 < 5.9unaffected
LinuxLinux5.10.209 <= 5.10.*unaffected
LinuxLinux5.15.148 <= 5.15.*unaffected
LinuxLinux6.1.75 <= 6.1.*unaffected
LinuxLinux6.6.14 <= 6.6.*unaffected
LinuxLinux6.7.2 <= 6.7.*unaffected
LinuxLinux6.8 <= *unaffected

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References