CVE-2023-52471

2024-02-2600:00:00

ubuntu.com

linux kernel

cve-2023-52471

ice vulnerability

null pointer fix

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6.5

Confidence

Low

EPSS

Percentile

9.0%

JSON

In the Linux kernel, the following vulnerability has been resolved: ice:
Fix some null pointer dereference issues in ice_ptp.c devm_kasprintf()
returns a pointer to dynamically allocated memory which can be NULL upon
failure.

Notes

Author	Note
	Priority reason: NULL pointer dereference on memory allocation failure which is very unlikely for an attacker to be able to influence and hence cause.