CVE-2023-52607 is a null-pointer dereference vulnerability in the Linux kernel's powerpc/mm component, specifically within the pgtable_cache_add function. This flaw arises when kasprintf() fails to allocate memory, returning a NULL pointer that is not properly checked, leading to a system crash. Rated with a CVSS score of 5.5 (Medium), this vulnerability can be exploited locally with low attack complexity, resulting in a high impact on system availability (denial of service). There is no impact on confidentiality or integrity. Currently, there is no evidence of active exploitation, nor are there any public exploit modules available on platforms like Metasploit or ExploitDB. The vulnerability has received minimal community discussion and media coverage, indicating a low level of public awareness.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 4.19.307CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 4.20, <= 5.4.269CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 5.5, <= 5.10.210CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 5.11, <= 5.15.149CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 5.16, < 6.1.77CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.