QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2023-52976

Back to search

CVE-2023-52976

Published: Mar 27, 2025

Modified: May 23, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: efi: fix potential NULL deref in efi_mem_reserve_persistent When iterating on a linked list, a result of memremap is dereferenced without checking it for NULL. This patch adds a check that falls back on allocating a new page in case memremap doesn't succeed. Found by Linux Verification Center (linuxtesting.org) with SVACE. [ardb: return -ENOMEM instead of breaking out of the loop]

VendorProductVersions

Linux

Linux

affected
18df7577adae6c6c778bf774b3aebcacbc1fb439 - < d92a25627bcdf264183670da73c9a60c0bac327e
affected
18df7577adae6c6c778bf774b3aebcacbc1fb439 - < 87d4ff18738fd71e7e3c10827c80257da6283697
affected
18df7577adae6c6c778bf774b3aebcacbc1fb439 - < d8fc0b5fb3e816a4a8684bcd3ed02cbef0fce23c
affected
18df7577adae6c6c778bf774b3aebcacbc1fb439 - < a2e6a9ff89f13666a1c3ff7195612ab949ea9afc
affected
18df7577adae6c6c778bf774b3aebcacbc1fb439 - < 966d47e1f27c45507c5df82b2a2157e5a4fd3909

+2 more versions

Linux

Linux

affected
5.2
unaffected
0 - < 5.2
unaffected
5.4.232 - <= 5.4.*
unaffected
5.10.168 - <= 5.10.*
unaffected
5.15.93 - <= 5.15.*

+2 more versions

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now