Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2023-52607 Details

Description

In the Linux kernel, the following vulnerability has been resolved: powerpc/mm: Fix null-pointer dereference in pgtable_cache_add kasprintf() returns a pointer to dynamically allocated memory which can be NULL upon failure. Ensure the allocation was successful by checking the pointer validity.

Metrics

CVSS 3.x Severity and Vector Strings:

CNA: CISA-ADPCVSS-B:5.5 MEDIUMVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://git.kernel.org/stable/c/145febd85c3bcc5c74d87ef9a598fc7d9122d532 kernel.orgPatch
https://git.kernel.org/stable/c/21e45a7b08d7cd98d6a53c5fc5111879f2d96611 kernel.orgPatch
https://git.kernel.org/stable/c/aa28eecb43cac6e20ef14dfc50b8892c1fbcda5b kernel.orgPatch
https://git.kernel.org/stable/c/ac3ed969a40357b0542d20f096a6d43acdfa6cc7 kernel.orgPatch
https://git.kernel.org/stable/c/d482d61025e303a2bef3733a011b6b740215cfa1 kernel.orgPatch

see all 17 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-476NULL Pointer DereferenceCISA-ADP

Affected Products

ProductVersions
linux linux kernel
< 4.19.307
>= 4.20, <= 5.4.269
>= 5.5, <= 5.10.210
>= 5.11, <= 5.15.149
>= 5.16, < 6.1.77

CPE

  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

10 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2023-52607
NVD Published Date:
Mar 6, 2024
NVD Last Modified:
Jun 17, 2026
Source:
kernel.org
CVE-2023-52607 Details - Not Deferred