01 Record

CVE-2023-52696

powerpc/powernv: Add a null pointer check in opal_powercap_init()

HighPUBLISHEDCNA: Linux

CNA base score7.5 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

View raw JSON

02 Description

powerpc/powernv: Add a null pointer check in opal_powercap_init()

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatableyesAn attacker can reliably automate reconnaissance through exploitation, so this scales.
Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.82% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 57.0% of scored records. A rank, not a probability.

NVD base score

7.5 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD analysis status

Analyzed. NVD last modified this record on 2026-06-17.

Red Hat severity

Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2024-05-17 14:27Z2 YR AGO

Last updated

2026-05-11 19:31Z5 MO AGO

Reserved

2024-03-07

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.5)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses

CWE-476NULL Pointer DereferenceBase

Data version

5.2

Document digest

9234a965d5cb7cac5796a1f2fb9cb1070a97660be5496b41e4cbe4521815517a

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxb9ef7b4b867f56114bedbe6bf104cfaba0ca818e to < 9da4a56dd3772570512ca58aa8832b052ae910dc, b9ef7b4b867f56114bedbe6bf104cfaba0ca818e to < a67a04ad05acb56640798625e73fa54d6d41cce1, b9ef7b4b867f56114bedbe6bf104cfaba0ca818e to < 6b58d16037217d0c64a2a09b655f370403ec7219, b9ef7b4b867f56114bedbe6bf104cfaba0ca818e to < f152a6bfd187f67afeffc9fd68cbe46f51439be0, b9ef7b4b867f56114bedbe6bf104cfaba0ca818e to < 69f95c5e9220f77ce7c540686b056c2b49e9a664, b9ef7b4b867f56114bedbe6bf104cfaba0ca818e to < b02ecc35d01a76b4235e008d2dd292895b28ecab, b9ef7b4b867f56114bedbe6bf104cfaba0ca818e to < e123015c0ba859cf48aa7f89c5016cc6e98e018d, 4.20—

linuxlinux_kernelb9ef7b4b867f to < e123015c0ba8, b9ef7b4b867f to < 9da4a56dd377, b9ef7b4b867f to < a67a04ad05ac, b9ef7b4b867f to < 6b58d1603721, b9ef7b4b867f to < f152a6bfd187, b9ef7b4b867f to < 69f95c5e9220, b9ef7b4b867f to < b02ecc35d01a, 4.2.0—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/9da4a56dd3772570512ca58aa8832b052ae910dc
git.kernel.orghttps://git.kernel.org/stable/c/a67a04ad05acb56640798625e73fa54d6d41cce1
git.kernel.orghttps://git.kernel.org/stable/c/6b58d16037217d0c64a2a09b655f370403ec7219
git.kernel.orghttps://git.kernel.org/stable/c/f152a6bfd187f67afeffc9fd68cbe46f51439be0
git.kernel.orghttps://git.kernel.org/stable/c/69f95c5e9220f77ce7c540686b056c2b49e9a664
git.kernel.orghttps://git.kernel.org/stable/c/b02ecc35d01a76b4235e008d2dd292895b28ecab
git.kernel.orghttps://git.kernel.org/stable/c/e123015c0ba859cf48aa7f89c5016cc6e98e018d
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2024/06/msg00016.html

07 Fixed in

Debian 12

linux
Fixed in 6.1.76-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.6.15-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.6.15-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.