PT-2024-1912 · Linux+4 · Linux Kernel+4

Kunwu Chan + 5 · Published 2024-01-02 · Updated 2025-09-29 · CVE-2023-52471

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a null pointer dereference in the ice ptp.c file of the Linux kernel, specifically with the devm kasprintf() function, which can return a null pointer upon failure. This can potentially allow an attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALSA-2024:5101

ALSA-2024:5102

ALSA-2025_16880

BDU:2024-01696

CESA-2024_5101

CESA-2024_5102

CVE-2023-52471

INFSA-2024_5101

INFSA-2024_5102

RHSA-2024:5101

RHSA-2024:5102

RHSA-2024_5101

RHSA-2024_5102

RLSA-2024:5101

RLSA-2024:5102

RXSA-2024:5101

Affected Products

Almalinux

Centos

Linux Kernel

Red Hat

Rocky Linux

References · 514

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52471.json · Exploit
• https://osv.dev/vulnerability/CVE-2023-52471 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2024-5101.html · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2024:5101 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-52471 · Vendor Advisory
• https://git.kernel.org/stable/c/3cd9b9bee33f39f6c6d52360fe381b89a7b12695 · Patch
• https://cve.org/CVERecord?id=CVE-2023-52471 · Security Note
• https://osv.dev/vulnerability/RLSA-2024:5101 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-52471 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-52471 · Security Note
• https://errata.rockylinux.org/RLSA-2024:5101 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2024-5101.html · Vendor Advisory
• https://git.kernel.org/stable/c/3027e7b15b02d2d37e3f82d6b8404f6d37e3b8cf · Patch
• https://osv.dev/vulnerability/RLSA-2024:5102 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2024-5102.html · Vendor Advisory