CVE-2023-52612: debian debian_linux Classic Buffer Overflow
CVSS: 7.8v3.1HighModified
AliasesUBUNTU-CVE-2023-52612DEBIAN-CVE-2023-52612
Published 18-03-2024Last modified 15-10-2026
Vulnerability summary
CVE-2023-52612 is a high (CVSS 7.8) Classic Buffer Overflow vulnerability in debian debian_linux. EPSS estimates a 0.27% chance of exploitation in the next 30 days, higher than 18.4% of scored vulnerabilities.
CVSS score
7.8/10
010
High · v3.1 (CVE.org)EPSS score
0.27%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 22 · Related 23DLA-3840-1DLA-3841-1SUSE-SU-2024:1466-1SUSE-SU-2024:1480-1SUSE-SU-2024:1490-1SUSE-SU-2024:2892-1SUSE-SU-2024:2901-1SUSE-SU-2024:2940-1USN-6725-1USN-6725-2USN-6726-1USN-6726-2USN-6726-3USN-6818-1USN-6818-3USN-6818-4USN-6819-1USN-6819-3USN-6819-4USN-7121-1USN-7121-2USN-7121-3USN-6765-1USN-6818-2USN-6819-2
Timeline
- 18-03-2024PublishedVulnerability first disclosed.
- 15-10-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: crypto: scomp - fix req->dst buffer overflow The req->dst buffer size should be checked before copying from the scomp_scratch->dst to avoid req->dst buffer overflow problem.
CVSS metrics
4 scores · 4 sources · 1 versionHigh 7.8Preferred score · CVE.org (CNA)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HSourcesAll 4 agree
- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- NVDNIST7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.27%
Chance of exploitation in the next 30 days
Percentile
18%
Versus all other CVEs
30-day change
0.00 pp
From 0.27% on 18-09-2026
18-09-202618-10-2026
EPSS score0.27%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu115 products
- linux< 4.15.0-231.243 | < 5.4.0-176.196 | < 5.15.0-102.112
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 4.15.0-1175.188 | < 5.4.0-1122.132 | < 5.15.0-1057.63
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Debian2 products
- linux< 6.1.76-1 | < 6.6.15-1
- debian_linuxEOL10.0
Linux2 products
- linux≥ 1ab53a77b772bf7369464a0e4fa6fd6499acf8f1, < 1142d65c5b881590962ad763f94505b6dd67d2fe | ≥ 1ab53a77b772bf7369464a0e4fa6fd6499acf8f1, < e0e3f4a18784182cfe34e20c00eca11e78d53e76 | ≥ 1ab53a77b772bf7369464a0e4fa6fd6499acf8f1, < 4518dc468cdd796757190515a9be7408adc8911e | ≥ 1ab53a77b772bf7369464a0e4fa6fd6499acf8f1, < a5f2f91b3fd7387e5102060809316a0f8f0bc625 | ≥ 1ab53a77b772bf7369464a0e4fa6fd6499acf8f1, < 4df0c942d04a67df174195ad8082f6e30e7f71a5 | ≥ 1ab53a77b772bf7369464a0e4fa6fd6499acf8f1, < 7d9e5bed036a7f9e2062a137e97e3c1e77fb8759 | ≥ 1ab53a77b772bf7369464a0e4fa6fd6499acf8f1, < 71c6670f9f032ec67d8f4e3f8db4646bf5a62883 | ≥ 1ab53a77b772bf7369464a0e4fa6fd6499acf8f1, < 744e1885922a9943458954cfea917b31064b4131 | 4.10
- linux_kernel≥ 4.10, < 4.19.306 | ≥ 4.20, < 5.4.268 | ≥ 5.5, < 5.10.209 | ≥ 5.11, < 5.15.148 | ≥ 5.16, < 6.1.75 | ≥ 6.2, < 6.6.14 | ≥ 6.7, < 6.7.2
3 vendors · 119 products
