Critical Null Pointer Dereference in Linux Kernel - linux Package Vulnerability
Summary
DEBIAN-CVE-2023-52465: In the Linux kernel, the following vulnerability has been resolved: power: supply: Fix null pointer dereference in smb2_probe devm_kasprintf and devm_kzalloc return a pointer to dynamically allocated memory which can be... Affects linux versions < 6.6.15-1. Fixed in 6.6.15-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The linux package is a core component of the Debian operating system, providing the essential kernel that manages system resources and hardware interactions. It is responsible for enabling the execution of applications and ensuring system stability. This vulnerability affects versions of the linux package in Debian 13 and 14, making it crucial for users to maintain updated systems to avoid potential exploits.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified that leads to a null pointer dereference in the smb2_probe function. This issue arises when the functions devm_kasprintf and devm_kzalloc return a pointer to dynamically allocated memory, which can be NULL upon failure. If exploited, this vulnerability could lead to system crashes or unexpected behavior, compromising the integrity and availability of the system.
How To Fix
Minimum fixed version
6.6.15-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, no specific workarounds have been provided for this vulnerability. The best course of action is to apply the available patch as soon as possible.
Conclusion
The identified vulnerability in the Linux kernel poses a significant risk to users of the linux package in Debian 13 and 14. It is essential to update to the patched version 6.6.15-1 to mitigate potential risks. Users are encouraged to stay informed and utilize tools like Vulert for ongoing monitoring of vulnerabilities.
See every vulnerability recorded for linux →
FAQ
The vulnerability is a null pointer dereference in the Linux kernel, which can lead to system crashes.
The vulnerability affects the linux package in Debian 13 and 14 prior to version 6.6.15-1.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
While there are no specific workarounds, it is recommended to monitor your system closely and apply the patch as soon as possible.
Detailed information can be found in the Debian CVE database at https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-52465.json.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
