Cyber Resilience

CVE-2023-52686

Memory Safety in Linux Kernel 4.11 – 4.19.306

Published
17 May 2024
Modified
04 March 2025
Patch / advisory
CVSS Score v3.1 5.5
Click a component to see what it means
Raw vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Score 0.0025 16th percentile
Risk Priority 35 floored blend · peak EPSS

Summary

CVE-2023-52686 is a medium-severity NULL Pointer Dereference (CWE-476) vulnerability in Linux Linux Kernel. Its CVSS base score is 5.5 (Medium).

Operationally, ranked at the 16th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

OWASP Top 10 for Web (2025)

EU & UK References

Vulnerability Data

In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv: Add a null pointer check in opal_event_init() kasprintf() returns a pointer to dynamically allocated memory which can be NULL upon failure.

CWE(s)

Related Threats

CVEs Like This One

CVE-2025-38020Same product: Debian Debian Linux
CVE-2025-38364Same product: Debian Debian Linux
CVE-2025-37844Same product: Debian Debian Linux
CVE-2025-38304Same product: Debian Debian Linux
CVE-2025-38683Same product: Debian Debian Linux
CVE-2024-26744Same product: Debian Debian Linux
CVE-2025-37958Same product: Debian Debian Linux
CVE-2025-38319Same product: Debian Debian Linux
CVE-2025-38634Same product: Debian Debian Linux
CVE-2025-38569Same product: Debian Debian Linux

Affected Assets

linux
linux kernel
4.11 — 4.19.306 · 4.20 — 5.4.268 · 5.5 — 5.10.209
debian
debian linux
10.0

Mitigating Controls

Mitigating Controls (NIST CSF 2.0) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.

PR.PS-06 mostly match
prevents

Secure SDLC practices (static analysis, code review, safe coding standards) directly prevent NULL dereference bugs during development.

Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.

detects

Security testing can detect NULL dereference defects before release.

prevents

Secure SDLC mandates defensive coding practices that can prevent NULL dereferences.

prevents

Application security requirements can specify input validation and pointer-safety rules.

prevents

Secure architecture principles encourage defensive design that avoids unsafe pointer use.

prevents

Secure coding standards directly require NULL-pointer checks and safe dereference patterns.

References