CVE-2023-52675

MediumCVSS 5.5/10Last modified Oct 15, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

powerpc/imc-pmu: Add a null pointer check in update_events_in_group()

kasprintf() returns a pointer to dynamically allocated memory which can be NULL upon failure.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

VendorProductVersions
LinuxLinux>= 885dcd709ba9120b9935415b8b0f9d1b94e5826b, < 75fc599bcdcb1de093c9ced2e3cccc832f3787f3; >= 885dcd709ba9120b9935415b8b0f9d1b94e5826b, < 1e80aa25d186a7aa212df5acd8c75f55ac8dae34; >= 885dcd709ba9120b9935415b8b0f9d1b94e5826b, < 5a669f3511d273c8c1ab1c1d268fbcdf53fc7a05; >= 885dcd709ba9120b9935415b8b0f9d1b94e5826b, < f105c263009839d80fad6998324a4e1b3511cba0; >= 885dcd709ba9120b9935415b8b0f9d1b94e5826b, < a2da3f9b1a1019c887ee1d164475a8fcdb0a3fec; >= 885dcd709ba9120b9935415b8b0f9d1b94e5826b, < 024352f7928b28f53609660663329d8c0f4ad032; >= 885dcd709ba9120b9935415b8b0f9d1b94e5826b, < c7d828e12b326ea50fb80c369d7aa87519ed14c6; >= 885dcd709ba9120b9935415b8b0f9d1b94e5826b, < 0a233867a39078ebb0f575e2948593bbff5826b3
LinuxLinux4.14
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.0, < V3.1.5
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.0, < V3.1.5
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP>= V3.1.0, < V3.1.5
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP>= V3.1.0, < V3.1.5
SiemensSIPLUS S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.0, < V3.1.5

References

Timeline

Published
May 17, 2024
Last modified
Oct 15, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-526765.5In the Linux kernel, the following vulnerability has been resolved: bpf: Guard stack limits against 32bit overflow This patch promotes theCVE-2023-526775.5In the Linux kernel, the following vulnerability has been resolved: riscv: Check if the code to patch lies in the exit section Otherwise wCVE-2023-526785.5In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Confirm list is non-empty before utilizing list_first_entryCVE-2023-526797.8In the Linux kernel, the following vulnerability has been resolved: of: Fix double free in of_parse_phandle_with_args_map In of_parse_phanCVE-2023-52687.2A vulnerability was found in DedeBIZ 6.2 and classified as critical. This issue affects some unknown processing of the file /src/admin/makehCVE-2023-526805.5In the Linux kernel, the following vulnerability has been resolved: ALSA: scarlett2: Add missing error checks to *_ctl_get() The *_ctl_getCVE-2023-526815.5In the Linux kernel, the following vulnerability has been resolved: efivarfs: Free s_fs_info on unmount Now that we allocate a s_fs_info sCVE-2023-526827.1In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to wait on block writeback for post_read case If inode is coCVE-2023-526835.5In the Linux kernel, the following vulnerability has been resolved: ACPI: LPIT: Avoid u32 multiplication overflow In lpit_update_residencyCVE-2023-526845.5In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: qseecom: fix memory leaks in error paths Fix instancesCVE-2023-526865.5In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv: Add a null pointer check in opal_event_init() kasprinCVE-2023-526875.5In the Linux kernel, the following vulnerability has been resolved: crypto: safexcel - Add error handling for dma_map_sg() calls Macro dma
CVE-2023-52675: Medium severity, CVSS 5.5 | Vulnix