CVE-2023-52662: linux
CVSS: 7.8v3.1HighModified
AliasesUBUNTU-CVE-2023-52662DEBIAN-CVE-2023-52662
Published 17-05-2024Last modified 05-08-2026
Vulnerability summary
CVE-2023-52662 is a high (CVSS 7.8) vulnerability in linux. EPSS estimates a 0.24% chance of exploitation in the next 30 days, higher than 13.6% of scored vulnerabilities.
CVSS score
7.8/10
010
High · v3.1 (CVE.org)EPSS score
0.24%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 29 · Related 25RHSA-2024:5101RHSA-2024:5102RHSA-2024:9315RHSA-2025:9584SUSE-SU-2024:2008-1SUSE-SU-2024:2019-1SUSE-SU-2024:2135-1SUSE-SU-2024:2190-1SUSE-SU-2024:2203-1SUSE-SU-2024:2973-1SUSE-SU-2025:20008-1SUSE-SU-2025:20028-1SUSE-SU-2025:20166-1SUSE-SU-2025:20249-1USN-6816-1USN-6817-1USN-6817-2USN-6817-3USN-6820-1USN-6820-2USN-6821-1USN-6821-2USN-6821-3USN-6821-4USN-6828-1USN-6871-1USN-6878-1USN-6892-1USN-6919-1
Timeline
- 17-05-2024PublishedVulnerability first disclosed.
- 05-08-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node When ida_alloc_max fails, resources allocated before should be freed, including *res allocated by kmalloc and ttm_resource_init.
CVSS metrics
4 scores · 4 sources · 1 versionHigh 7.8Preferred score · CVE.org (CNA)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HSources4 sources · 5.5–7.8
- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HDiffers
- NVDNIST5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HDiffers
EPSS trend
Probability
0.24%
Chance of exploitation in the next 30 days
Percentile
14%
Versus all other CVEs
30-day change
0.00 pp
From 0.24% on 19-09-2026
19-09-202619-10-2026
EPSS score0.24%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu105 products
- linux< 5.15.0-112.122 | < 6.8.0-35.35
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 5.15.0-1063.69 | < 6.8.0-1009.9
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Linux2 products
- linux≥ d3bcb4b02fe977d6b7a82dbb6288e9223b5b6732, < 03b1072616a8f7d6e8594f643b416a9467c83fbf | ≥ d3bcb4b02fe977d6b7a82dbb6288e9223b5b6732, < 40624af6674745e174c754a20d7c53c250e65e7a | ≥ d3bcb4b02fe977d6b7a82dbb6288e9223b5b6732, < 83e0f220d1e992fa074157fcf14945bf170ffbc5 | ≥ d3bcb4b02fe977d6b7a82dbb6288e9223b5b6732, < 6fc6233f6db1579b69b54b44571f1a7fde8186e6 | ≥ d3bcb4b02fe977d6b7a82dbb6288e9223b5b6732, < d1e546ab91c670e536a274a75481034ab7534876 | ≥ d3bcb4b02fe977d6b7a82dbb6288e9223b5b6732, < 89709105a6091948ffb6ec2427954cbfe45358ce | 5.14
- linux_kernel≥ 5.14, < 5.15.153 | ≥ 5.16, < 6.1.83 | ≥ 6.2, < 6.6.23 | ≥ 6.7, < 6.7.11 | ≥ 6.8, < 6.8.2
Debian1 product
- linux< 6.1.85-1 | < 6.7.12-1
3 vendors · 108 products