CVE-2023-52869

pstore/platform: Add check for kstrdup

State: Published
Severity: 5.5 Medium
Published: May 21, 2024
Updated: May 11, 2026
Reserved: May 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

pstore/platform: Add check for kstrdup

Add check for the return value of kstrdup() and return the error if it fails in order to avoid NULL pointer dereference.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	563ca40ddf400dbf8c6254077f9b6887101d0f08 to before bb166bdae1a7d7db30e9be7e6ccaba606debc05fAffected 563ca40ddf400dbf8c6254077f9b6887101d0f08 to before 379b120e4f27fd1cf636a5f85570c4d240a3f688Affected 563ca40ddf400dbf8c6254077f9b6887101d0f08 to before 63f637309baadf81a095f2653e3b807d4b5814b9Affected 563ca40ddf400dbf8c6254077f9b6887101d0f08 to before 1c426da79f9fc7b761021b5eb44185ba119cd44aAffected 563ca40ddf400dbf8c6254077f9b6887101d0f08 to before ad5cb6deb41417ef41b9d6ff54f789212108606fAffected 563ca40ddf400dbf8c6254077f9b6887101d0f08 to before a19d48f7c5d57c0f0405a7d4334d1d38fe9d3c1cAffected
LinuxLinux	5.8Affected before 5.8Not affected 5.10.201 through 5.10.Not affected 5.15.139 through 5.15.Not affected 6.1.63 through 6.1.Not affected 6.5.12 through 6.5.Not affected 6.6.2 through 6.6.*Not affected 6.7 and laterNot affected

Product

Versions

LinuxLinux

563ca40ddf400dbf8c6254077f9b6887101d0f08 to before bb166bdae1a7d7db30e9be7e6ccaba606debc05fAffected
563ca40ddf400dbf8c6254077f9b6887101d0f08 to before 379b120e4f27fd1cf636a5f85570c4d240a3f688Affected
563ca40ddf400dbf8c6254077f9b6887101d0f08 to before 63f637309baadf81a095f2653e3b807d4b5814b9Affected
563ca40ddf400dbf8c6254077f9b6887101d0f08 to before 1c426da79f9fc7b761021b5eb44185ba119cd44aAffected
563ca40ddf400dbf8c6254077f9b6887101d0f08 to before ad5cb6deb41417ef41b9d6ff54f789212108606fAffected
563ca40ddf400dbf8c6254077f9b6887101d0f08 to before a19d48f7c5d57c0f0405a7d4334d1d38fe9d3c1cAffected

LinuxLinux

5.8Affected
before 5.8Not affected
5.10.201 through 5.10.*Not affected
5.15.139 through 5.15.*Not affected
6.1.63 through 6.1.*Not affected
6.5.12 through 6.5.*Not affected
6.6.2 through 6.6.*Not affected
6.7 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.