CVE-2023-52919
published 2024-10-22CVE-2023-52919: In the Linux kernel, the following vulnerability has been resolved: nfc: nci: fix possible NULL pointer dereference in send_acknowledge() Handle memory…
PriorityP417medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.21%
11.0th percentile
In the Linux kernel, the following vulnerability has been resolved:
nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
Handle memory allocation failure from nci_skb_alloc() (calling
alloc_skb()) to avoid possible NULL pointer dereference.
Affected
22 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.64-1 (bookworm) | linux 6.1.64-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 391d8a2da787257aeaf952c974405b53926e3fb3 < 2b2edf089df3a69f0072c6e71563394c5a94e62e | 2b2edf089df3a69f0072c6e71563394c5a94e62e |
| linux | linux | >= 391d8a2da787257aeaf952c974405b53926e3fb3 < 5622592f8f74ae3e594379af02e64ea84772d0dd | 5622592f8f74ae3e594379af02e64ea84772d0dd |
| linux | linux | >= 391d8a2da787257aeaf952c974405b53926e3fb3 < 76050b0cc5a72e0c7493287b7e18e1cb9e3c4612 | 76050b0cc5a72e0c7493287b7e18e1cb9e3c4612 |
| linux | linux | >= 391d8a2da787257aeaf952c974405b53926e3fb3 < c95fa5b20fe03609e0894656fa43c18045b5097e | c95fa5b20fe03609e0894656fa43c18045b5097e |
| linux | linux | >= 391d8a2da787257aeaf952c974405b53926e3fb3 < ffdc881f68073ff86bf21afb9bb954812e8278be | ffdc881f68073ff86bf21afb9bb954812e8278be |
| linux | linux | >= 391d8a2da787257aeaf952c974405b53926e3fb3 < d7dbdbe3800a908eecd4975c31be47dd45e2104a | d7dbdbe3800a908eecd4975c31be47dd45e2104a |
| linux | linux | >= 391d8a2da787257aeaf952c974405b53926e3fb3 < bb6cacc439ddd2cd51227ab193f4f91cfc7f014f | bb6cacc439ddd2cd51227ab193f4f91cfc7f014f |
| linux | linux | >= 391d8a2da787257aeaf952c974405b53926e3fb3 < 7937609cd387246aed994e81aa4fa951358fba41 | 7937609cd387246aed994e81aa4fa951358fba41 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.205-1 | 5.10.205-1 |
| linux | linux_kernel | >= 0 < 6.1.64-1 | 6.1.64-1 |
| linux | linux_kernel | >= 0 < 6.5.10-1 | 6.5.10-1 |
| linux | linux_kernel | >= 0 < 6.5.10-1 | 6.5.10-1 |
| linux | linux_kernel | >= 3.11 < 4.14.328 | 4.14.328 |
| linux | linux_kernel | >= 4.15 < 4.19.297 | 4.19.297 |
| linux | linux_kernel | >= 4.20 < 5.4.259 | 5.4.259 |
| linux | linux_kernel | >= 5.11 < 5.15.137 | 5.15.137 |
| linux | linux_kernel | >= 5.16 < 6.1.60 | 6.1.60 |
| linux | linux_kernel | >= 5.5 < 5.10.199 | 5.10.199 |
| linux | linux_kernel | >= 6.2 < 6.5.9 | 6.5.9 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA ICS
Siemens SINEC OS
cisa_ics·2025-08-14
Siemens SINEC OS
ICS Advisory
##
Siemens SINEC OS
Release DateAugust 14, 2025
Alert CodeICSA-25-226-15
Related topics:
Industrial Control System Vulnerabilities, Industrial Control Systems
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global).
View CSAF
## 1. EXECUTIVE SUMMARY
- CVSS v3.1 9.1
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Siemens
- Equipment: RUGGEDCOM, SCALANCE
- Vulnerabilities: NULL Pointer Dereference, Use After Free, Unchecked Input for Loop Condition, Out-of-bounds Write, Ou
Red Hat
kernel: nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
vendor_redhat·2024-10-22·CVSS 5.5
CVE-2023-52919 [MEDIUM] CWE-476 kernel: nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
kernel: nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
In the Linux kernel, the following vulnerability has been resolved:
nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
Handle memory allocation failure from nci_skb_alloc() (calling
alloc_skb()) to avoid possible NULL pointer dereference.
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (Red Hat Enterprise Linux 8) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 8) - Not affected
Package: kernel (Red Hat Enterprise Linux 9) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 9) - Not affected
Debian
CVE-2023-52919: linux - In the Linux kernel, the following vulnerability has been resolved: nfc: nci: f...
vendor_debian·2023·CVSS 5.5
CVE-2023-52919 [MEDIUM] CVE-2023-52919: linux - In the Linux kernel, the following vulnerability has been resolved: nfc: nci: f...
In the Linux kernel, the following vulnerability has been resolved: nfc: nci: fix possible NULL pointer dereference in send_acknowledge() Handle memory allocation failure from nci_skb_alloc() (calling alloc_skb()) to avoid possible NULL pointer dereference.
Scope: local
bookworm: resolved (fixed in 6.1.64-1)
bullseye: resolved (fixed in 5.10.205-1)
forky: resolved (fixed in 6.5.10-1)
sid: resolved (fixed in 6.5.10-1)
trixie: resolved (fixed in 6.5.10-1)
GHSA
GHSA-5hvv-8hjx-72f5: In the Linux kernel, the following vulnerability has been resolved:
nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
Handle mem
ghsa_unreviewed·2024-10-22
CVE-2023-52919 [MEDIUM] CWE-476 GHSA-5hvv-8hjx-72f5: In the Linux kernel, the following vulnerability has been resolved:
nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
Handle mem
In the Linux kernel, the following vulnerability has been resolved:
nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
Handle memory allocation failure from nci_skb_alloc() (calling
alloc_skb()) to avoid possible NULL pointer dereference.
OSV
CVE-2023-52919: In the Linux kernel, the following vulnerability has been resolved: nfc: nci: fix possible NULL pointer dereference in send_acknowledge() Handle memor
osv·2024-10-22·CVSS 5.5
CVE-2023-52919 [MEDIUM] CVE-2023-52919: In the Linux kernel, the following vulnerability has been resolved: nfc: nci: fix possible NULL pointer dereference in send_acknowledge() Handle memor
In the Linux kernel, the following vulnerability has been resolved: nfc: nci: fix possible NULL pointer dereference in send_acknowledge() Handle memory allocation failure from nci_skb_alloc() (calling alloc_skb()) to avoid possible NULL pointer dereference.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://git.kernel.org/stable/c/2b2edf089df3a69f0072c6e71563394c5a94e62ehttps://git.kernel.org/stable/c/5622592f8f74ae3e594379af02e64ea84772d0ddhttps://git.kernel.org/stable/c/76050b0cc5a72e0c7493287b7e18e1cb9e3c4612https://git.kernel.org/stable/c/7937609cd387246aed994e81aa4fa951358fba41https://git.kernel.org/stable/c/bb6cacc439ddd2cd51227ab193f4f91cfc7f014fhttps://git.kernel.org/stable/c/c95fa5b20fe03609e0894656fa43c18045b5097ehttps://git.kernel.org/stable/c/d7dbdbe3800a908eecd4975c31be47dd45e2104ahttps://git.kernel.org/stable/c/ffdc881f68073ff86bf21afb9bb954812e8278be
2024-10-22
Published