P4Verified

CVE-2023-52612: linux kernel from 4.10 (inclusive), before 4.19.306 (exclusive), from 4.20 (inclusive), before 5.4.268 (exclusive)…

CVE-2023-52612. CVSS 3.1 base score 7.8 (HIGH, NVD). EPSS 0.00273 (percentile 0.18273), scored 13-Oct-2026.

Affected technology

linux kernel · from 4.10 (inclusive), before 4.19.306 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.268 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.209 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.148 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.75 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.14 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.7.2 (exclusive)
linux

debian linux · 10.0
debian

Linux · 1ab53a77b772bf7369464a0e4fa6fd6499acf8f1 to before 1142d65c5b881590962ad763f94505b6dd67d2fe, 1ab53a77b772bf7369464a0e4fa6fd6499acf8f1 to before e0e3f4a18784182cfe34e20c00eca11e78d53e76, 1ab53a77b772bf7369464a0e4fa6fd6499acf8f1 to before 4518dc468cdd796757190515a9be7408adc8911e, 1ab53a77b772bf7369464a0e4fa6fd6499acf8f1 to before a5f2f91b3fd7387e5102060809316a0f8f0bc625, 1ab53a77b772bf7369464a0e4fa6fd6499acf8f1 to before 4df0c942d04a67df174195ad8082f6e30e7f71a5, 1ab53a77b772bf7369464a0e4fa6fd6499acf8f1 to before 7d9e5bed036a7f9e2062a137e97e3c1e77fb8759, 1ab53a77b772bf7369464a0e4fa6fd6499acf8f1 to before 71c6670f9f032ec67d8f4e3f8db4646bf5a62883, 1ab53a77b772bf7369464a0e4fa6fd6499acf8f1 to before 744e1885922a9943458954cfea917b31064b4131
Linux

Linux · 4.10
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

Component: Not specified by the source
File: crypto/scompress.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 15-Oct-2026 01:47 UTC

CWE: CWE-120
CCR priority: 31.3 /100 (P4)
CVSS 3.1: 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · NVD
EPSS: 0.00273 · percentile 0.18273 · 2026-10-13
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-15 01:46:36.646798+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2023-52612.html