CVE-2023-52450

low-risk
Published 2024-02-22

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/uncore: Fix NULL pointer dereference issue in upi_fill_topology() Get logical socket id instead of physical id in discover_upi_topology() to avoid out-of-bound access on 'upi = &type->topology[nid][idx];' line that leads to NULL pointer dereference in upi_fill_topology()

Do I need to act?

-
0.01% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
5
CVSS 5.5/10 Medium
LOCAL / LOW complexity

Affected Products (1)

Affected Vendors

Linux

References (6)

Patch https://git.kernel.org/stable/c/1692cf434ba13ee212495b5af795b6a07e986ce4
Patch https://git.kernel.org/stable/c/3d6f4a78b104c65e4256c3776c9949f49a1b459e
Patch https://git.kernel.org/stable/c/bf1bf09e6b599758851457f3999779622a48d015
Patch https://git.kernel.org/stable/c/1692cf434ba13ee212495b5af795b6a07e986ce4
Patch https://git.kernel.org/stable/c/3d6f4a78b104c65e4256c3776c9949f49a1b459e
Patch https://git.kernel.org/stable/c/bf1bf09e6b599758851457f3999779622a48d015
23
/ 100
low-risk
Severity 18/34 · Moderate
Exploitability 0/34 · Minimal
Exposure 5/34 · Minimal