CVE-2023-52696: powerpc/powernv: Add a null pointer check in opal_powercap_init()
In the Linux kernel, the following vulnerability has been resolved:
powerpc/powernv: Add a null pointer check in opalpowercapinit()
kasprintf() returns a pointer to dynamically allocated memory which can be NULL upon failure.
Other sources
In the Linux kernel, the following vulnerability has been resolved:
powerpc/powernv: Add a null pointer check in opalpowercapinit()
The Linux kernel CVE team has assigned CVE-2023-52696 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024051755-CVE-2023-52696-d4ab@gregkh/T
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 5.4.268 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 5.10.209 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 5.15.148 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.1.75 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.6.14 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.7.2 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.8 - Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Patch CVE-2023-52696
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52696?
CVE-2023-52696 has been classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2023-52696?
To fix CVE-2023-52696, update your kernel to version 5.4.268, 5.10.209, 5.15.148, 6.1.75, or higher versions as specified.
What systems are affected by CVE-2023-52696?
CVE-2023-52696 affects multiple versions of the Linux kernel used in various distributions, including Red Hat and Debian.
What type of vulnerability is CVE-2023-52696?
CVE-2023-52696 is a null pointer dereference vulnerability within the powerpc/powernv module of the Linux kernel.
When was CVE-2023-52696 disclosed?
CVE-2023-52696 was disclosed in 2023 as part of a series of kernel security updates.