5.5

CVE-2023-52686: debian debian_linux NULL Pointer Dereference

CVSS: 5.5v3.1MediumAnalyzed
AliasesUBUNTU-CVE-2023-52686DEBIAN-CVE-2023-52686
Published 17-05-2024Last modified 11-05-2026
Open JSON

Vulnerability summary

CVE-2023-52686 is a medium (CVSS 5.5) NULL Pointer Dereference vulnerability in debian debian_linux. EPSS estimates a 0.25% chance of exploitation in the next 30 days, higher than 15.6% of scored vulnerabilities.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (NVD)
EPSS score
0.25%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 30 · Related 28
DLA-3841-1RHSA-2024:4211RHSA-2024:9315RHSA-2025:15016SUSE-SU-2024:1979-1SUSE-SU-2024:1983-1

Timeline

  1. 17-05-2024
    PublishedVulnerability first disclosed.
  2. 11-05-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv: Add a null pointer check in opal_event_init() kasprintf() returns a pointer to dynamically allocated memory which can be NULL upon failure.

CVSS metrics

3 scores · 3 sources · 1 version

EPSS trend

Probability

0.25%

Chance of exploitation in the next 30 days

Percentile

16%

Versus all other CVEs

30-day change

0.00 pp

From 0.25% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.25%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu115 products
  • linuxAll versions (No fix recorded) | < 5.4.0-176.196 | < 5.15.0-102.112
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 5.4.0-1122.132 | < 5.15.0-1057.63
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian2 products
Linux2 products
  • linux≥ 2717a33d60745f2f72e521cdaedf79b00f66f8ca, < 8422d179cf46889c15ceff9ede48c5bfa4e7f0b4 | ≥ 2717a33d60745f2f72e521cdaedf79b00f66f8ca, < e93d7cf4c1ddbcd846739e7ad849f955a4f18031 | ≥ 2717a33d60745f2f72e521cdaedf79b00f66f8ca, < e6ad05e3ae9c84c5a71d7bb2d44dc845ae7990cf | ≥ 2717a33d60745f2f72e521cdaedf79b00f66f8ca, < c0b111ea786ddcc8be0682612830796ece9436c7 | ≥ 2717a33d60745f2f72e521cdaedf79b00f66f8ca, < 9a523e1da6d88c2034f946adfa4f74b236c95ca9 | ≥ 2717a33d60745f2f72e521cdaedf79b00f66f8ca, < a14c55eb461d630b836f80591d8caf1f74e62877 | ≥ 2717a33d60745f2f72e521cdaedf79b00f66f8ca, < e08c2e275fa1874de945b87093f925997722ee42 | ≥ 2717a33d60745f2f72e521cdaedf79b00f66f8ca, < 8649829a1dd25199bbf557b2621cedb4bf9b3050 | 4.11
  • linux_kernel≥ 4.11, < 4.19.306 | ≥ 4.20, < 5.4.268 | ≥ 5.5, < 5.10.209 | ≥ 5.11, < 5.15.148 | ≥ 5.16, < 6.1.75 | ≥ 6.2, < 6.6.14 | ≥ 6.7, < 6.7.2

3 vendors · 119 products

References

21 links
Show all 21 references