CVE-2023-52873 Affecting kernel-64kb-devel package, versions <6.4.0-150600.23.14.1
Threat Intelligence
EPSS
0.04% (12th
percentile)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-SLES156-KERNEL64KBDEVEL-7550668
- published 23 Jul 2024
- disclosed 22 Jul 2024
Introduced: 22 Jul 2024
CVE-2023-52873 Open this link in a new tabHow to fix?
Upgrade SLES:15.6 kernel-64kb-devel to version 6.4.0-150600.23.14.1 or higher.
NVD Description
Note: Versions mentioned in the description apply only to the upstream kernel-64kb-devel package and not the kernel-64kb-devel package as distributed by SLES.
See How to fix? for SLES:15.6 relevant fixed versions and status.
In the Linux kernel, the following vulnerability has been resolved:
clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
Add the check for the return value of mtk_alloc_clk_data() in order to avoid NULL pointer dereference.
References
- https://www.suse.com/security/cve/CVE-2023-52873.html
- https://bugzilla.suse.com/1225589
- https://git.kernel.org/stable/c/1f57f78fbacf630430bf954e5a84caafdfea30c0
- https://git.kernel.org/stable/c/3994387ba3564976731179c4d4a6d7850ddda71a
- https://git.kernel.org/stable/c/a90239551abc181687f8c0ba60b276f7d75c141e
- https://git.kernel.org/stable/c/ca6d565a2319d69d9766e6ecbb5af827fc4afb2b
- https://git.kernel.org/stable/c/df1c4a9efa3f5b6fb5e0ae63890230dbe2190b7e
- https://git.kernel.org/stable/c/f6a7c51cf07a399ec067d39f0a22f1817c5c7d2b
- https://git.kernel.org/stable/c/fbe466f06d4ea18745da0d57540539b7b36936ae
CVSS Scores
version 3.1