What’s Vulnerable › Vulnerabilities

CVE-2023-52450: perf/x86/intel/uncore: Fix NULL pointer dereference issue in upi_fill_topology()

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-02-22 · updated 2026-06-17
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/uncore: Fix NULL pointer dereference issue in upi_fill_topology() Get logical socket id instead of physical id in discover_upi_topology() to avoid out-of-bound access on 'upi = &type->topology[nid][idx];' line that leads to NULL pointer dereference in upi_fill_topology()

Affected products

• Linux kernel: from 6.2.0 before 6.6.14; from 6.7.0 before 6.7.2 — fixed in 6.6.14, 6.7.2

How to fix

Upgrade to a fixed version: Linux kernel 6.6.14, 6.7.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/1692cf434ba13ee212495b5af795b6a07e986ce4
• https://git.kernel.org/stable/c/3d6f4a78b104c65e4256c3776c9949f49a1b459e
• https://git.kernel.org/stable/c/bf1bf09e6b599758851457f3999779622a48d015
• https://git.kernel.org/stable/c/1692cf434ba13ee212495b5af795b6a07e986ce4
• https://git.kernel.org/stable/c/3d6f4a78b104c65e4256c3776c9949f49a1b459e
• https://git.kernel.org/stable/c/bf1bf09e6b599758851457f3999779622a48d015

Get alerted when CVE-2023-52450 or the next vulnerability affects your stack