Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2023-52686 Details

Description

In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv: Add a null pointer check in opal_event_init() kasprintf() returns a pointer to dynamically allocated memory which can be NULL upon failure.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:5.5 MEDIUMVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://git.kernel.org/stable/c/8422d179cf46889c15ceff9ede48c5bfa4e7f0b4	kernel.org	Mailing ListPatch
https://git.kernel.org/stable/c/8649829a1dd25199bbf557b2621cedb4bf9b3050	kernel.org	Mailing ListPatch
https://git.kernel.org/stable/c/9a523e1da6d88c2034f946adfa4f74b236c95ca9	kernel.org	Mailing ListPatch
https://git.kernel.org/stable/c/a14c55eb461d630b836f80591d8caf1f74e62877	kernel.org	Mailing ListPatch
https://git.kernel.org/stable/c/c0b111ea786ddcc8be0682612830796ece9436c7	kernel.org	Mailing ListPatch
https://git.kernel.org/stable/c/e08c2e275fa1874de945b87093f925997722ee42	kernel.org	Mailing ListPatch
https://git.kernel.org/stable/c/e6ad05e3ae9c84c5a71d7bb2d44dc845ae7990cf	kernel.org	Mailing ListPatch
https://git.kernel.org/stable/c/e93d7cf4c1ddbcd846739e7ad849f955a4f18031	kernel.org	Mailing ListPatch
https://git.kernel.org/stable/c/8422d179cf46889c15ceff9ede48c5bfa4e7f0b4	CVE	Mailing ListPatch
https://git.kernel.org/stable/c/8649829a1dd25199bbf557b2621cedb4bf9b3050	CVE	Mailing ListPatch
https://git.kernel.org/stable/c/9a523e1da6d88c2034f946adfa4f74b236c95ca9	CVE	Mailing ListPatch
https://git.kernel.org/stable/c/a14c55eb461d630b836f80591d8caf1f74e62877	CVE	Mailing ListPatch
https://git.kernel.org/stable/c/c0b111ea786ddcc8be0682612830796ece9436c7	CVE	Mailing ListPatch
https://git.kernel.org/stable/c/e08c2e275fa1874de945b87093f925997722ee42	CVE	Mailing ListPatch
https://git.kernel.org/stable/c/e6ad05e3ae9c84c5a71d7bb2d44dc845ae7990cf	CVE	Mailing ListPatch
https://git.kernel.org/stable/c/e93d7cf4c1ddbcd846739e7ad849f955a4f18031	CVE	Mailing ListPatch
https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html	CVE	Mailing List

see all 17 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-476	NULL Pointer Dereference	[email protected]

Affected Products

Product	Versions
linux linux kernel	>= 4.11, < 4.19.306 >= 4.20, < 5.4.268 >= 5.5, < 5.10.209 >= 5.11, < 5.15.148 >= 5.16, < 6.1.75
CPE cpe:2.3:o:linux:linux_kernel:::::::: Remediation No remediation found in references.
debian debian linux	10.0
CPE cpe:2.3:o:debian:debian_linux:10.0:::::::* Remediation No remediation found in references.

Change History

8 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	CISA-ADP
Jun 17, 2026	CVE Modified	kernel.org
Mar 4, 2025	Initial Analysis	[email protected]
Nov 21, 2024	CVE Modified	CVE
Nov 4, 2024	CVE Modified	kernel.org
Jun 25, 2024	CVE Modified	kernel.org
May 29, 2024	CVE Modified	kernel.org
May 17, 2024	New CVE Received	kernel.org