CVE-2023-52607

powerpc/mm: Fix null-pointer dereference in pgtable_cache_add

State: Published
Severity: 5.5 Medium
Published: Mar 6, 2024
Updated: May 11, 2026
Reserved: Mar 2, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

powerpc/mm: Fix null-pointer dereference in pgtable_cache_add

kasprintf() returns a pointer to dynamically allocated memory which can be NULL upon failure. Ensure the allocation was successful by checking the pointer validity.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	a0668cdc154e54bf0c85182e0535eea237d53146 to before 21e45a7b08d7cd98d6a53c5fc5111879f2d96611Affected a0668cdc154e54bf0c85182e0535eea237d53146 to before f6781add1c311c17eff43e14c786004bbacf901eAffected a0668cdc154e54bf0c85182e0535eea237d53146 to before aa28eecb43cac6e20ef14dfc50b8892c1fbcda5bAffected a0668cdc154e54bf0c85182e0535eea237d53146 to before ac3ed969a40357b0542d20f096a6d43acdfa6cc7Affected a0668cdc154e54bf0c85182e0535eea237d53146 to before d482d61025e303a2bef3733a011b6b740215cfa1Affected a0668cdc154e54bf0c85182e0535eea237d53146 to before 145febd85c3bcc5c74d87ef9a598fc7d9122d532Affected a0668cdc154e54bf0c85182e0535eea237d53146 to before ffd29dc45bc0355393859049f6becddc3ed08f74Affected a0668cdc154e54bf0c85182e0535eea237d53146 to before f46c8a75263f97bda13c739ba1c90aced0d3b071Affected
LinuxLinux	2.6.33Affected before 2.6.33Not affected 4.19.307 through 4.19.Not affected 5.4.269 through 5.4.Not affected 5.10.210 through 5.10.Not affected 5.15.149 through 5.15.Not affected 6.1.77 through 6.1.Not affected 6.6.16 through 6.6.Not affected 6.7.4 through 6.7.*Not affected 6.8 and laterNot affected

Product

Versions

LinuxLinux

a0668cdc154e54bf0c85182e0535eea237d53146 to before 21e45a7b08d7cd98d6a53c5fc5111879f2d96611Affected
a0668cdc154e54bf0c85182e0535eea237d53146 to before f6781add1c311c17eff43e14c786004bbacf901eAffected
a0668cdc154e54bf0c85182e0535eea237d53146 to before aa28eecb43cac6e20ef14dfc50b8892c1fbcda5bAffected
a0668cdc154e54bf0c85182e0535eea237d53146 to before ac3ed969a40357b0542d20f096a6d43acdfa6cc7Affected
a0668cdc154e54bf0c85182e0535eea237d53146 to before d482d61025e303a2bef3733a011b6b740215cfa1Affected
a0668cdc154e54bf0c85182e0535eea237d53146 to before 145febd85c3bcc5c74d87ef9a598fc7d9122d532Affected
a0668cdc154e54bf0c85182e0535eea237d53146 to before ffd29dc45bc0355393859049f6becddc3ed08f74Affected
a0668cdc154e54bf0c85182e0535eea237d53146 to before f46c8a75263f97bda13c739ba1c90aced0d3b071Affected

LinuxLinux

2.6.33Affected
before 2.6.33Not affected
4.19.307 through 4.19.*Not affected
5.4.269 through 5.4.*Not affected
5.10.210 through 5.10.*Not affected
5.15.149 through 5.15.*Not affected
6.1.77 through 6.1.*Not affected
6.6.16 through 6.6.*Not affected
6.7.4 through 6.7.*Not affected
6.8 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.