CVE-2023-52756: pwm: Fix double shift bug
In the Linux kernel, the following vulnerability has been resolved:
pwm: Fix double shift bug
The Linux kernel CVE team has assigned CVE-2023-52756 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024052146-CVE-2023-52756-f694@gregkh/T
Other sources
Linux Kernel is vulnerable to a denial of service, caused by a double shift flaw. By sending a specially crafted request, a local authenticated attacker could exploit this vulnerability to cause a denial of service condition.
— IBM
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
— NVD
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52756?
CVE-2023-52756 has been classified with a moderate severity level due to its impact on the Linux kernel.
How do I fix CVE-2023-52756?
To resolve CVE-2023-52756, ensure that your Linux kernel is updated to a version beyond 4.14.331, 4.19.300, 5.4.262, 5.10.202, 5.15.140, 6.1.64, 6.5.13, 6.6.3, or 6.7.
Which Linux kernel versions are affected by CVE-2023-52756?
CVE-2023-52756 affects kernel versions up to and including 4.14.331, 4.19.300, 5.4.262, 5.10.202, 5.15.140, 6.1.64, 6.5.13, 6.6.3, and 6.7.
Is CVE-2023-52756 exploitable remotely?
CVE-2023-52756 does not pose a remote exploitation risk, as it affects the local kernel operations.
How was CVE-2023-52756 discovered?
CVE-2023-52756 was identified as a bug within the PWM subsystem of the Linux kernel that involved a double shift error.