CVE-2023-52629: linux kernel from 2.6.20 (inclusive), before 6.5.4 (exclusive); +2 more affected products

CVE-2023-52629 affects linux. CVSS 3.1 base score 8.4 (HIGH, Source advisory). EPSS 0.00254 (percentile 0.15877), scored 20-Oct-2026. Fixed version: 6.5.6-1. Fixed version: 6.5.6-1. Fixed version: 6.1.190-1.

Affected technology

linux kernel · from 2.6.20 (inclusive), before 6.5.4 (exclusive)
linux

Linux · 9f5e8eee5cfe1328660c71812d87c2a67bda389f to before ff635d1f143b55fa005e9e43b16e6d8f677e90a5, 9f5e8eee5cfe1328660c71812d87c2a67bda389f to before 610dbd8ac271aa36080aac50b928d700ee3fe4de, 9f5e8eee5cfe1328660c71812d87c2a67bda389f to before 246f80a0b17f8f582b2c0996db02998239057c65
Linux

Linux · 2.6.20
Linux

linux_kernel · 9f5e8eee5cfe to before 610dbd8ac271, 9f5e8eee5cfe to before 246f80a0b17f, 2.6.20
linux

Component: Not specified by the source
File: arch/sh/drivers/push-switch.c

Attack conditions (Source advisory, CVSS 3.1): Local · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.4/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 21-Oct-2026 15:29 UTC

CWE: CWE-416
Product: linux
CCR priority: 33.7 /100 (P4)
CVSS 3.1: 8.4 /10 · CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · Source advisory
EPSS: 0.00254 · percentile 0.15877 · 2026-10-20
KEV: no

Provenance

FIRST EPSS daily exploit-probability · Source record · observed 2026-10-20 16:56:29.772392+00:00 UTC
GitHub Advisory Database · Source record · observed 2026-10-04 06:01:24.332572+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-04 05:55:03.931280+00:00 UTC
OSV.dev · Source record · observed 2026-10-21 07:07:21.683489+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2023-52629.html