Description

In the Linux kernel, the following vulnerability has been resolved:

pstore/platform: Add check for kstrdup

Add check for the return value of kstrdup() and return the error
if it fails in order to avoid NULL pointer dereference.

Classification

CVE ID: CVE-2023-52869

Affected Products

Vendor: Linux

Product: Linux

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.04% (probability of being exploited)

EPSS Percentile: 12.41% (scored less or equal to compared to others)

EPSS Date: 2025-02-04 (when was this score calculated)

References

https://git.kernel.org/stable/c/bb166bdae1a7d7db30e9be7e6ccaba606debc05f
https://git.kernel.org/stable/c/379b120e4f27fd1cf636a5f85570c4d240a3f688
https://git.kernel.org/stable/c/63f637309baadf81a095f2653e3b807d4b5814b9
https://git.kernel.org/stable/c/1c426da79f9fc7b761021b5eb44185ba119cd44a
https://git.kernel.org/stable/c/ad5cb6deb41417ef41b9d6ff54f789212108606f
https://git.kernel.org/stable/c/a19d48f7c5d57c0f0405a7d4334d1d38fe9d3c1c

Timeline