CVE-2023-52976

Summary

CVE-2023-52976 is a vulnerability affecting the Linux kernel. It was identified by Linux Verification Center (linuxtesting.org) in collaboration with SVACE. The issue lies in the 'efi' module, specifically in the function 'efi_mem_reserve_persistent'. Here, a NULL dereference occurs during the iteration of a linked list when the result of 'memremap' is not checked for NULL. To mitigate this, the patch introduces a check that falls back on allocating a new page if 'memremap' fails, thus preventing the NULL dereference and potential memory corruption.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.