CVE-2023-52976

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-52976
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-52976.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2023-52976
Downstream
Related
Published
2025-03-27T16:43:16.596Z
Modified
2026-04-11T12:46:38.790439Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
efi: fix potential NULL deref in efi_mem_reserve_persistent
Details

In the Linux kernel, the following vulnerability has been resolved:

efi: fix potential NULL deref in efimemreserve_persistent

When iterating on a linked list, a result of memremap is dereferenced without checking it for NULL.

This patch adds a check that falls back on allocating a new page in case memremap doesn't succeed.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

[ardb: return -ENOMEM instead of breaking out of the loop]

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52976.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
18df7577adae6c6c778bf774b3aebcacbc1fb439
Fixed
d92a25627bcdf264183670da73c9a60c0bac327e
Fixed
87d4ff18738fd71e7e3c10827c80257da6283697
Fixed
d8fc0b5fb3e816a4a8684bcd3ed02cbef0fce23c
Fixed
a2e6a9ff89f13666a1c3ff7195612ab949ea9afc
Fixed
966d47e1f27c45507c5df82b2a2157e5a4fd3909
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b5961ecad7121fec138ebee7d9eba4863f9dc6e7

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-52976.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.2.0
Fixed
5.4.232
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.168
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.93
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.11

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-52976.json"