7.5

CVE-2023-52696: debian debian_linux NULL Pointer Dereference

CVSS: 7.5v3.1HighAnalyzed
AliasesUBUNTU-CVE-2023-52696DEBIAN-CVE-2023-52696
Published 17-05-2024Last modified 11-05-2026

Vulnerability summary

CVE-2023-52696 is a high (CVSS 7.5) NULL Pointer Dereference vulnerability in debian debian_linux. EPSS estimates a 0.82% chance of exploitation in the next 30 days, higher than 56.5% of scored vulnerabilities.

Overall risk
30/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.5/10
010
High · v3.1 (CVE.org)
EPSS score
0.82%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 21 · Related 21

Timeline

  1. 17-05-2024
    PublishedVulnerability first disclosed.
  2. 11-05-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv: Add a null pointer check in opal_powercap_init() kasprintf() returns a pointer to dynamically allocated memory which can be NULL upon failure.

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.82%

Chance of exploitation in the next 30 days

Percentile

57%

Versus all other CVEs

30-day change

0.00 pp

From 0.82% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.82%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu112 products
  • linux< 5.4.0-176.196 | < 5.15.0-102.112
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws< 5.4.0-1122.132 | < 5.15.0-1057.63
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian2 products
Linux2 products
  • linux≥ b9ef7b4b867f56114bedbe6bf104cfaba0ca818e, < 9da4a56dd3772570512ca58aa8832b052ae910dc | ≥ b9ef7b4b867f56114bedbe6bf104cfaba0ca818e, < a67a04ad05acb56640798625e73fa54d6d41cce1 | ≥ b9ef7b4b867f56114bedbe6bf104cfaba0ca818e, < 6b58d16037217d0c64a2a09b655f370403ec7219 | ≥ b9ef7b4b867f56114bedbe6bf104cfaba0ca818e, < f152a6bfd187f67afeffc9fd68cbe46f51439be0 | ≥ b9ef7b4b867f56114bedbe6bf104cfaba0ca818e, < 69f95c5e9220f77ce7c540686b056c2b49e9a664 | ≥ b9ef7b4b867f56114bedbe6bf104cfaba0ca818e, < b02ecc35d01a76b4235e008d2dd292895b28ecab | ≥ b9ef7b4b867f56114bedbe6bf104cfaba0ca818e, < e123015c0ba859cf48aa7f89c5016cc6e98e018d | 4.20
  • linux_kernel≥ 4.20, < 5.4.268 | ≥ 5.5, < 5.10.209 | ≥ 5.11, < 5.15.148 | ≥ 5.16, < 6.1.75 | ≥ 6.2, < 6.6.14 | ≥ 6.7, < 6.7.2

3 vendors · 116 products

References

21 links
Show all 21 references