CVE-2023-52465: power: supply: Fix null pointer dereference in smb2_probe
In the Linux kernel, the following vulnerability has been resolved:
power: supply: Fix null pointer dereference in smb2probe
devmkasprintf and devmkzalloc return a pointer to dynamically allocated memory which can be NULL upon failure.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.22-1Fixed in 6.12.25-1
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52465?
CVE-2023-52465 has been classified as a moderate severity vulnerability due to the potential for a null pointer dereference.
How do I fix CVE-2023-52465?
To fix CVE-2023-52465, update your Linux kernel to a version that includes the patch addressing this vulnerability.
Which versions of the Linux kernel are affected by CVE-2023-52465?
CVE-2023-52465 affects Linux kernel versions from 6.5.0 up to 6.6.14 and from 6.7.0 to 6.7.2.
What is the impact of exploiting CVE-2023-52465?
Exploiting CVE-2023-52465 can lead to system crashes due to a null pointer dereference.
Is there a specific patch version for CVE-2023-52465?
Yes, Debian packages like linux versions 5.10.223-1, 5.10.226-1, 6.1.119-1, and 6.12.11-1 specifically address CVE-2023-52465.