CVE-2023-52696: debian debian_linux NULL Pointer Dereference
CVSS: 7.5v3.1HighAnalyzed
AliasesUBUNTU-CVE-2023-52696DEBIAN-CVE-2023-52696
Published 17-05-2024Last modified 11-05-2026
Vulnerability summary
CVE-2023-52696 is a high (CVSS 7.5) NULL Pointer Dereference vulnerability in debian debian_linux. EPSS estimates a 0.82% chance of exploitation in the next 30 days, higher than 56.5% of scored vulnerabilities.
CVSS score
7.5/10
010
High · v3.1 (CVE.org)EPSS score
0.82%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 21 · Related 21DLA-3841-1RHSA-2024:9315SUSE-SU-2024:1979-1SUSE-SU-2024:1983-1SUSE-SU-2024:2008-1SUSE-SU-2024:2019-1SUSE-SU-2024:2135-1SUSE-SU-2024:2184-1SUSE-SU-2024:2190-1SUSE-SU-2024:2203-1SUSE-SU-2024:2973-1SUSE-SU-2025:20008-1SUSE-SU-2025:20028-1SUSE-SU-2025:20166-1SUSE-SU-2025:20249-1USN-6818-1USN-6818-3USN-6818-4USN-6819-1USN-6819-3USN-6819-4USN-6818-2USN-6819-2
Timeline
- 17-05-2024PublishedVulnerability first disclosed.
- 11-05-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv: Add a null pointer check in opal_powercap_init() kasprintf() returns a pointer to dynamically allocated memory which can be NULL upon failure.
CVSS metrics
4 scores · 4 sources · 1 versionHigh 7.5Preferred score · CVE.org (CNA)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HSourcesAll 4 agree
- OSV · UbuntuEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- NVDNIST7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
0.82%
Chance of exploitation in the next 30 days
Percentile
57%
Versus all other CVEs
30-day change
0.00 pp
From 0.82% on 19-09-2026
19-09-202619-10-2026
EPSS score0.82%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu112 products
- linux< 5.4.0-176.196 | < 5.15.0-102.112
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 5.4.0-1122.132 | < 5.15.0-1057.63
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Debian2 products
- linux< 6.1.76-1 | < 6.6.15-1
- debian_linuxEOL10.0
Linux2 products
- linux≥ b9ef7b4b867f56114bedbe6bf104cfaba0ca818e, < 9da4a56dd3772570512ca58aa8832b052ae910dc | ≥ b9ef7b4b867f56114bedbe6bf104cfaba0ca818e, < a67a04ad05acb56640798625e73fa54d6d41cce1 | ≥ b9ef7b4b867f56114bedbe6bf104cfaba0ca818e, < 6b58d16037217d0c64a2a09b655f370403ec7219 | ≥ b9ef7b4b867f56114bedbe6bf104cfaba0ca818e, < f152a6bfd187f67afeffc9fd68cbe46f51439be0 | ≥ b9ef7b4b867f56114bedbe6bf104cfaba0ca818e, < 69f95c5e9220f77ce7c540686b056c2b49e9a664 | ≥ b9ef7b4b867f56114bedbe6bf104cfaba0ca818e, < b02ecc35d01a76b4235e008d2dd292895b28ecab | ≥ b9ef7b4b867f56114bedbe6bf104cfaba0ca818e, < e123015c0ba859cf48aa7f89c5016cc6e98e018d | 4.20
- linux_kernel≥ 4.20, < 5.4.268 | ≥ 5.5, < 5.10.209 | ≥ 5.11, < 5.15.148 | ≥ 5.16, < 6.1.75 | ≥ 6.2, < 6.6.14 | ≥ 6.7, < 6.7.2
3 vendors · 116 products
References
21 links- lists.debian.org/debian-lts-announce/2024/06/msg00016.htmlX TransferredMailing ListThird Party Advisory