01 Record

CVE-2023-52462

bpf: fix check for attempt to corrupt spilled pointer

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

bpf: fix check for attempt to corrupt spilled pointer

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.23% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 13.5% of scored records. A rank, not a probability.

NVD base score

5.5 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

NVD analysis status

Modified. NVD last modified this record on 2026-06-17.

Red Hat severity

Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2024-02-23 14:46Z2 YR AGO

Last updated

2026-05-23 15:25Z3 MO AGO

Reserved

2024-02-20

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-476NULL Pointer DereferenceBase

Data version

5.2

Document digest

65dc94bdf2db5f38a412f07e75355a816fc5c41e52db90772125b8341beaede1

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxcdd73a5ed0840da88a3b9ad353f568e6f156d417 to < 2757f17972d87773b3677777f5682510f13c66ef, 07c286c10a9cedbd71f20269ff3a4e73d9aab2fe to < 67e6707f07354ed1acb4e65552e97c60cf9d69cf, 27113c59b6d0a587b29ae72d4ff3f832f58b0651 to < fc3e3c50a0a4cac1463967c110686189e4a59104, 27113c59b6d0a587b29ae72d4ff3f832f58b0651 to < 8dc15b0670594543c356567a1a45b0182ec63174, 27113c59b6d0a587b29ae72d4ff3f832f58b0651 to < 40617d45ea05535105e202a8a819e388a2b1f036, 27113c59b6d0a587b29ae72d4ff3f832f58b0651 to < ab125ed3ec1c10ccc36bc98c7a4256ad114a3dae, 5.10.163 to < 5.10.209, 5.15.86 to < 5.15.148, 5.16—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/2757f17972d87773b3677777f5682510f13c66ef
git.kernel.orghttps://git.kernel.org/stable/c/67e6707f07354ed1acb4e65552e97c60cf9d69cf
git.kernel.orghttps://git.kernel.org/stable/c/fc3e3c50a0a4cac1463967c110686189e4a59104
git.kernel.orghttps://git.kernel.org/stable/c/8dc15b0670594543c356567a1a45b0182ec63174
git.kernel.orghttps://git.kernel.org/stable/c/40617d45ea05535105e202a8a819e388a2b1f036
git.kernel.orghttps://git.kernel.org/stable/c/ab125ed3ec1c10ccc36bc98c7a4256ad114a3dae
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2024/06/msg00016.html

01 Record index

CVE-2023-52462

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2023-52462

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References