PT-2023-9444 · Linux+4 · Linux Kernel+4

Khazhismel Kumykov · Published 2023-01-20 · Updated 2025-09-29 · CVE-2023-52893

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a null pointer dereference in the gsmi component of the Linux kernel. This can be triggered by a new get variable call with attr=NULL, which was introduced by a commit to the efi: pstore module. The vulnerability may allow an attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALSA-2025_16880

ALT-PU-2023-8448

BDU:2024-07613

CVE-2023-52893

OESA-2024-2079

OESA-2024-2080

OPENSUSE-SU-2024_3190-1

OPENSUSE-SU-2024_3209-1

OPENSUSE-SU-2024_3408-1

OPENSUSE-SU-2024_3483-1

SUSE-SU-2024:3189-1

SUSE-SU-2024:3190-1

SUSE-SU-2024:3209-1

SUSE-SU-2024:3227-1

SUSE-SU-2024:3251-1

SUSE-SU-2024:3252-1

SUSE-SU-2024:3408-1

SUSE-SU-2024:3483-1

Affected Products

Alt Linux

Astra Linux

Linux Kernel

Red Os

Suse

References · 804

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52893.json · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2024:3251-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-48686 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-43882 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-43819 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-42289 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-48634 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-38613 · Security Note
• https://git.kernel.org/stable/c/ee5763ef829bd923033510de6d1df7c73f085e4b · Patch
• https://cve.org/CVERecord?id=CVE-2023-52893 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2023-52893 · Vendor Advisory
• https://git.kernel.org/stable/c/32313c11bdc8a02c577abaf865be3664ab30410a · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-52893 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-48795 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-36946 · Security Note