CVE-2023-52605

Updated: 2024-12-06 01:39:10.157666

Description:

[REJECTED CVE] A NULL pointer dereference issue was identified in the Linux kernel within the ACPI subsystem's extlog module. In the extlog_exit() function, the extlog_l1_addr pointer was dereferenced before verifying if it was NULL, potentially causing system instability or crashes during the cleanup process.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x NONE 0
CVSS Version 3.x MEDIUM 4.4

Status

OS name Project name Version Score Severity Status Errata Last updated

Statement

AlmaLinux 9.2 ESU kernel 5.14.0 4.4 MEDIUM Ignored 2024-09-25 12:26:48
CentOS 6 ELS kernel 2.6.32 4.4 MEDIUM Ignored 2024-09-25 12:26:51
CentOS 7 ELS kernel 3.10.0 4.4 MEDIUM Ignored 2024-09-25 12:26:48
CentOS 8.4 ELS kernel 4.18.0 4.4 MEDIUM Released CLSA-2024:1727690947 2024-09-30 10:46:44
CentOS 8.5 ELS kernel 4.18.0 4.4 MEDIUM Released CLSA-2024:1727690025 2024-09-30 10:46:45
CentOS Stream 8 ELS kernel 4.18.0 4.4 MEDIUM Released CLSA-2024:1727815919 2024-10-01 17:27:21
CloudLinux 6 ELS kernel 2.6.32 4.4 MEDIUM Ignored 2024-09-25 12:26:48
CloudLinux 7 ELS kernel 3.10.0 4.4 MEDIUM Ignored 2024-09-25 12:26:48
Oracle Linux 6 ELS kernel 2.6.32 4.4 MEDIUM Ignored 2024-09-25 12:26:48