Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CVE-2023-52675

CVE-2023-52675MEDIUM

Linux Linux — powerpc/imc-pmu: Add a null pointer check in update_events_in_group()

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   L   N  U  N  N  H    5.5   .0028   19.0     —

AFFECTED
  Product  Versions                                    Fixed
  Linux    885dcd709ba9120b9935415b8b0f9d1b94e5826b –  —
  Linux    4.14 –                                      4.19.306

TIMELINE
  Mar 7   Reserved by Linux
  May 17  Published (CNA: Linux)
  Oct 15  ENRICHED — CVE-2023-52675 (Linux). Received CVSS 5.5 and CPE data from NVD.

CWE-476 · CNA: Linux · CVSS v3.1 · 10 references · NVD status: Modified

Description

In the Linux kernel, the following vulnerability has been resolved: powerpc/imc-pmu: Add a null pointer check in update_events_in_group() kasprintf() returns a pointer to dynamically allocated memory which can be NULL upon failure.

Lifecycle

Complete event history — 3 events, chronological
Date	Event	Detail
March 7, 2024	Reserved	Reserved by Linux
May 17, 2024	Published	Published (CNA: Linux)
October 15, 2026	ENRICHED	ENRICHED — CVE-2023-52675 (Linux). Received CVSS 5.5 and CPE data from NVD.

Affected

Affected products and packages — 2 rows
Vendor	Product / Package	Ecosystem	Version introduced	Fixed
Linux	Linux	—	885dcd709ba9120b9935415b8b0f9d1b94e5826b	—
Linux	Linux	—	4.14	4.19.306

Weaknesses

CWE-476

References (10)

https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://git.kernel.org/stable/c/024352f7928b28f53609660663329d8c0f4ad032 [Mailing List, Patch]
https://git.kernel.org/stable/c/0a233867a39078ebb0f575e2948593bbff5826b3 [Mailing List, Patch]
https://git.kernel.org/stable/c/1e80aa25d186a7aa212df5acd8c75f55ac8dae34 [Mailing List, Patch]
https://git.kernel.org/stable/c/5a669f3511d273c8c1ab1c1d268fbcdf53fc7a05 [Mailing List, Patch]
https://git.kernel.org/stable/c/75fc599bcdcb1de093c9ced2e3cccc832f3787f3 [Mailing List, Patch]
https://git.kernel.org/stable/c/a2da3f9b1a1019c887ee1d164475a8fcdb0a3fec [Mailing List, Patch]
https://git.kernel.org/stable/c/c7d828e12b326ea50fb80c369d7aa87519ed14c6 [Mailing List, Patch]
https://git.kernel.org/stable/c/f105c263009839d80fad6998324a4e1b3511cba0 [Mailing List, Patch]
https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html [Mailing List]

Authoritative record: CVE-2023-52675 at cve.org

Vendors: linux

Weaknesses: CWE-476

About this page

This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2023-52675 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Monday, October 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.