Medium 5.5Published May 17, 2024

CVE-2023-52675powerpc/imc-pmu: Add a null pointer check in update_events_in_group()

Updated under an hour ago (Oct 27, 2026, 4:10 AM ET)

Does this affect you?

It affects Linux and 4 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: powerpc/imc-pmu: Add a null pointer check in update_events_in_group() kasprintf() returns a pointer to dynamically allocated memory which can be NULL upon failure.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 14, 2026
First seen by InfoSec Signals: Oct 14, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	885dcd709ba9120b9935415b8b0f9d1b94e5826b builds before 75fc599bcdcb1de093c9ced2e3cccc832f3787f3; 885dcd709ba9120b9935415b8b0f9d1b94e5826b builds before 1e80aa25d186a7aa212df5acd8c75f55ac8dae34; 885dcd709ba9120b9935415b8b0f9d1b94e5826b builds before 5a669f3511d273c8c1ab1c1d268fbcdf53fc7a05; from 885dcd709ba9120b9935415b8b0f9d1b94e5826b before f105c263009839d80fad6998324a4e1b3511cba0; from 885dcd709ba9120b9935415b8b0f9d1b94e5826b before a2da3f9b1a1019c887ee1d164475a8fcdb0a3fec; from 885dcd709ba9120b9935415b8b0f9d1b94e5826b before 024352f7928b28f53609660663329d8c0f4ad032; from 885dcd709ba9120b9935415b8b0f9d1b94e5826b before c7d828e12b326ea50fb80c369d7aa87519ed14c6; 885dcd709ba9120b9935415b8b0f9d1b94e5826b builds before 0a233867a39078ebb0f575e2948593bbff5826b3	CNA record
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.0 before V3.1.5	CISA ADP
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518f_4_pn_dp_mfp (from the name)	from V3.1.0 before V3.1.5	CISA ADP
Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP siemens:siplus_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.0 before V3.1.5	CISA ADP
linux linux_kernel linux:linux_kernel	from 4.14 before 4.19.306; from 4.20 before 5.4.268; from 5.5 before 5.10.209; from 5.11 before 5.15.148; from 5.16 before 6.1.75; from 6.2 before 6.6.14; from 6.7 before 6.7.2	NVD

References

References

https://git.kernel.org/stable/c/75fc599bcdcb1de093c9ced2e3cccc832f3787f3	mailing-list, patch
https://git.kernel.org/stable/c/1e80aa25d186a7aa212df5acd8c75f55ac8dae34	mailing-list, patch
https://git.kernel.org/stable/c/5a669f3511d273c8c1ab1c1d268fbcdf53fc7a05	mailing-list, patch
https://git.kernel.org/stable/c/f105c263009839d80fad6998324a4e1b3511cba0	mailing-list, patch
https://git.kernel.org/stable/c/a2da3f9b1a1019c887ee1d164475a8fcdb0a3fec	mailing-list, patch
https://git.kernel.org/stable/c/024352f7928b28f53609660663329d8c0f4ad032	mailing-list, patch
https://git.kernel.org/stable/c/c7d828e12b326ea50fb80c369d7aa87519ed14c6	mailing-list, patch
https://git.kernel.org/stable/c/0a233867a39078ebb0f575e2948593bbff5826b3	mailing-list, patch
https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html	mailing-list
https://cert-portal.siemens.com/productcert/html/ssa-398330.html

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.