{
  "schemaVersion": 1,
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "record": {
    "id": "CVE-2023-52893",
    "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2023-52893",
    "idYear": 2023,
    "status": "PUBLISHED",
    "publishedAt": "2024-08-21T06:10:33.043Z",
    "updatedAt": "2026-05-11T19:35:00.760Z",
    "importedAt": "2026-10-24T01:57:03.413Z",
    "snapshot": {
      "id": "cve_2026-10-24_midnight_baseline",
      "at": "2026-10-24T00:00:00.000Z",
      "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z"
    },
    "facts": {
      "title": "gsmi: fix null-deref in gsmi_get_variable",
      "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ngsmi: fix null-deref in gsmi_get_variable\n\nWe can get EFI variables without fetching the attribute, so we must\nallow for that in gsmi.\n\ncommit 859748255b43 (\"efi: pstore: Omit efivars caching EFI varstore\naccess layer\") added a new get_variable call with attr=NULL, which\ntriggers panic in gsmi.",
      "affected": [
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "74c5b31c6618f01079212332b2e5f6c42f2d6307",
              "status": "affected",
              "versionType": "git",
              "lessThan": "ee5763ef829bd923033510de6d1df7c73f085e4b"
            },
            {
              "version": "74c5b31c6618f01079212332b2e5f6c42f2d6307",
              "status": "affected",
              "versionType": "git",
              "lessThan": "32313c11bdc8a02c577abaf865be3664ab30410a"
            },
            {
              "version": "74c5b31c6618f01079212332b2e5f6c42f2d6307",
              "status": "affected",
              "versionType": "git",
              "lessThan": "ffef77794fb5f1245c3249b86342bad2299accb5"
            },
            {
              "version": "74c5b31c6618f01079212332b2e5f6c42f2d6307",
              "status": "affected",
              "versionType": "git",
              "lessThan": "ae2a9dcc8caa60b1e14671294e5ec902ea5d1dfd"
            },
            {
              "version": "74c5b31c6618f01079212332b2e5f6c42f2d6307",
              "status": "affected",
              "versionType": "git",
              "lessThan": "eb0421d90f916dffe96b4c049ddf01c0c50620d2"
            },
            {
              "version": "74c5b31c6618f01079212332b2e5f6c42f2d6307",
              "status": "affected",
              "versionType": "git",
              "lessThan": "6646d769fdb0ce4318ef9afd127f8526d1ca8393"
            },
            {
              "version": "74c5b31c6618f01079212332b2e5f6c42f2d6307",
              "status": "affected",
              "versionType": "git",
              "lessThan": "a769b05eeed7accc4019a1ed9799dd72067f1ce8"
            }
          ]
        },
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "affected",
          "versions": [
            {
              "version": "3.0",
              "status": "affected"
            },
            {
              "version": "0",
              "status": "unaffected",
              "versionType": "semver",
              "lessThan": "3.0"
            },
            {
              "version": "4.14.304",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "4.14.*"
            },
            {
              "version": "4.19.271",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "4.19.*"
            },
            {
              "version": "5.4.230",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.4.*"
            },
            {
              "version": "5.10.165",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.10.*"
            },
            {
              "version": "5.15.90",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.15.*"
            },
            {
              "version": "6.1.8",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.*"
            },
            {
              "version": "6.2",
              "status": "unaffected",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ]
        }
      ]
    }
  }
}