CVE-2023-52869

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

pstore/platform: Add check for kstrdup

Add check for the return value of kstrdup() and return the error if it fails in order to avoid NULL pointer dereference.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

VendorProductVersions
LinuxLinux>= 563ca40ddf400dbf8c6254077f9b6887101d0f08, < bb166bdae1a7d7db30e9be7e6ccaba606debc05f; >= 563ca40ddf400dbf8c6254077f9b6887101d0f08, < 379b120e4f27fd1cf636a5f85570c4d240a3f688; >= 563ca40ddf400dbf8c6254077f9b6887101d0f08, < 63f637309baadf81a095f2653e3b807d4b5814b9; >= 563ca40ddf400dbf8c6254077f9b6887101d0f08, < 1c426da79f9fc7b761021b5eb44185ba119cd44a; >= 563ca40ddf400dbf8c6254077f9b6887101d0f08, < ad5cb6deb41417ef41b9d6ff54f789212108606f; >= 563ca40ddf400dbf8c6254077f9b6887101d0f08, < a19d48f7c5d57c0f0405a7d4334d1d38fe9d3c1c
LinuxLinux5.8
linuxlinux_kernel563ca40ddf40
linuxlinux_kernel5.8
linuxlinux_kernel—
linuxlinux_kernel—
linuxlinux_kernel—
linuxlinux_kernel—
linuxlinux_kernel—
linuxlinux_kernel—
linuxlinux_kernel—

References

Timeline

Published
May 21, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2023

CVE-2023-52874.8** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as problematic, was found in BEECMS 4.0. This affects an unknown part CVE-2023-528704.1In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data Add the chCVE-2023-528715.5In the Linux kernel, the following vulnerability has been resolved: soc: qcom: llcc: Handle a second device without data corruption UsuallCVE-2023-528727.8In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: fix race condition in status line change on dead connectionCVE-2023-528735.5In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data Add the chCVE-2023-528745.5In the Linux kernel, the following vulnerability has been resolved: x86/tdx: Zero out the missing RSI in TDX_HYPERCALL macro In the TDX_HYCVE-2023-528755.5In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data Add the chCVE-2023-528765.5In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data Add thCVE-2023-528775.5In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() It isCVE-2023-528785.5In the Linux kernel, the following vulnerability has been resolved: can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb CVE-2023-528795.5In the Linux kernel, the following vulnerability has been resolved: tracing: Have trace_event_file have ref counters The following can craCVE-2023-52889.8A remote unauthorized attacker may connect to the SIM1012, interact with the device and change configuration settings. The adversary may als
CVE-2023-52869: Medium severity, CVSS 5.5 | Vulnix