CVE-2023-52470

Note

Priority reason:
NULL pointer dereference on memory allocation failure which is very unlikely for an attacker to be able to influence and hence cause.
USN-6765-1 for linux-oem-6.5 wrongly stated that this CVE
was fixed in version 6.5.0-1022.23. The mentioned notice was revoked and
the state of the fix for linux-oem-6.5 was recovered to the previous
state.

Parameter	Value
Base score	5.5
Attack vector	Local
Attack complexity	Low
Privileges required	Low
User interaction	None
Scope	Unchanged
Confidentiality	None
Integrity impact	None
Availability impact	High
Vector	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CVE-2023-52470

Notes

Priority

Cvss 3 Severity Score

Status

Severity score breakdown

References

Join the discussion

Canonical is offering Expanded Security Maintenance

Further reading

Package	Release	Status
linux Launchpad, Ubuntu, Debian	bionic	Released (4.15.0-228.240) Available with Ubuntu Pro or Ubuntu Pro (Infra-only)
	focal	Released (5.4.0-176.196)
	jammy	Released (5.15.0-102.112)
	mantic	Released (6.5.0-41.41)
	noble	Not vulnerable (6.8.0-11.11)
	trusty	Not vulnerable (3.11.0-12.19)
	upstream	Released (6.8~rc1)
	xenial	Released (4.4.0-258.292) Available with Ubuntu Pro or Ubuntu Pro (Infra-only)
	Patches: Introduced by fa7f517cb26eb1a1a1f0baffcced39f6c3ec3337 Fixed by 7a2464fac80d42f6f8819fed97a553e9c2f43310
linux-allwinner-5.19 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	jammy	Ignored (end of kernel support)
	mantic	Does not exist
	noble	Does not exist
	trusty	Does not exist
	upstream	Ignored (end of life)
	xenial	Does not exist
linux-aws Launchpad, Ubuntu, Debian	bionic	Released (4.15.0-1172.185) Available with Ubuntu Pro or Ubuntu Pro (Infra-only)
	focal	Released (5.4.0-1122.132)
	jammy	Released (5.15.0-1057.63)
	mantic	Released (6.5.0-1021.21)
	noble	Not vulnerable (6.8.0-1001.1)
	trusty	Released (4.4.0-1135.141) Available with Ubuntu Pro or Ubuntu Pro (Infra-only)
	upstream	Released (6.8~rc1)
	xenial	Released (4.4.0-1173.188) Available with Ubuntu Pro or Ubuntu Pro (Infra-only)
linux-aws-5.0 Launchpad, Ubuntu, Debian	bionic	Ignored (superseded by linux-aws-5.3)
	focal	Does not exist
	jammy	Does not exist
	mantic	Does not exist
	noble	Does not exist
	trusty	Does not exist
	upstream	Ignored (superseded by linux-aws-5.3)
	xenial	Does not exist
linux-aws-5.11 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Ignored (superseded by linux-aws-5.13)
	jammy	Does not exist
	mantic	Does not exist
	noble	Does not exist
	trusty	Does not exist
	upstream	Ignored (superseded by linux-aws-5.13)