CVE-2023-52450: perf/x86/intel/uncore: Fix NULL pointer dereference issue in upi_fill_topology()
In the Linux kernel, the following vulnerability has been resolved:
perf/x86/intel/uncore: Fix NULL pointer dereference issue in upifilltopology()
Get logical socket id instead of physical id in discoverupitopology() to avoid out-of-bound access on 'upi = &type->topology[nid][idx];' line that leads to NULL pointer dereference in upifilltopology()
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.6.14 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.7.2
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52450?
CVE-2023-52450 has been classified as a medium-severity vulnerability.
How do I fix CVE-2023-52450?
To remediate CVE-2023-52450, upgrade to the latest versions of the Linux kernel or apply the specific package updates provided by your Linux distribution.
Which systems are affected by CVE-2023-52450?
CVE-2023-52450 affects various versions of the Linux kernel, specifically versions between 6.2.0 and 6.6.14, and also 6.7.0 to 6.7.2.
What kind of vulnerability is CVE-2023-52450?
CVE-2023-52450 is a NULL pointer dereference vulnerability that can lead to denial of service.
When was CVE-2023-52450 published?
CVE-2023-52450 was published in October 2023.