What is CVE-2023-52680?

CVE-2023-52680 is a Medium severity Linux kernel vulnerability with a CVSS score of 5.5 out of 10, affecting Linux kernel versions from 5.4 onward and patched in 5.15.148, 6.1.75, 6.6.14 and others. CVE-2023-52680 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2023-52680?

CVE-2023-52680 has a CVSS score of 5.5 out of 10, rated Medium severity. The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

Is there a patch available for CVE-2023-52680?

Yes, CVE-2023-52680 has been patched. Fixed versions include 5.15.148, 6.1.75, 6.6.14 and others. If you are running Linux kernel 5.4 or later up to the fix versions, apply the relevant patch for your kernel branch.

Is CVE-2023-52680 actively exploited?

CVE-2023-52680 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

CVE-2023-52680

Medium

In the Linux kernel, the following vulnerability has been resolved: ALSA: scarlett2: Add missing error checks to *_ctl_get() The *_ctl_get() functions which call scarlett2_update_*() were not checking the return value. Fix to check the return value and pass to the caller.

Package Linux Kernel

Published 2024-05-17

Last modified 2025-09-25

CVSS version 3.1

Patch available

Yes

CVSS 3.1 score

5.5

out of 10

Medium

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

High

Vector string

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness type

CWE-252

CVE-2023-52680 is classified as CWE-252

See CWE-252 on MITRE CWE for full details on this weakness type.

Affected versions

Linux kernel versions 5.4 and later are affected. Fixed in 5.15.148, 6.1.75, 6.6.14, 6.7.2, 6.8 and their respective stable series.

Affected from

≥ 5.4

Fixed in

✓ 5.15.148 5.15.x ✓ 6.1.75 6.1.x ✓ 6.6.14 6.6.x ✓ 6.7.2 6.7.x ✓ 6.8

References

5 total

Kernel Git
https://git.kernel.org/stable/c/3a09488f4f67f7ade59b8ac62a6c7fb29439cf51

Patch
Kernel Git
https://git.kernel.org/stable/c/50603a67daef161c78c814580d57f7f0be57167e

Patch
Kernel Git
https://git.kernel.org/stable/c/773e38f73461ef2134a0d33a08f1668edde9b7c3

Patch
Kernel Git
https://git.kernel.org/stable/c/821fbaeaaae23d483d3df799fe91ec8045973ec3

Patch
Kernel Git
https://git.kernel.org/stable/c/cda7762bea857e6951315a2f7d0632ea1850ed43

Patch

Details

CVE ID CVE-2023-52680

Severity Medium

CVSS score 5.5 / 10

CVSS version 3.1

Published 2024-05-17

Modified 2025-09-25

KEV No

Patch

Yes

Package linux

Frequently asked questions

What is CVE-2023-52680?

CVE-2023-52680 is a Medium severity Linux kernel vulnerability with a CVSS score of 5.5 out of 10 . It affects Linux kernel versions from 5.4 onward and has been patched in 5.15.148, 6.1.75, 6.6.14 and others. CVE-2023-52680 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
What is the CVSS score for CVE-2023-52680?

CVE-2023-52680 has a CVSS score of 5.5 out of 10, rated Medium severity (CVSS 3.1). The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.
Is there a patch available for CVE-2023-52680?

Yes. CVE-2023-52680 has been patched. Fixed versions include 5.15.148, 6.1.75, 6.6.14 and others. If you are running Linux kernel 5.4 or later up to the fix versions, apply the relevant patch for your kernel branch.
Is CVE-2023-52680 actively exploited?

No. CVE-2023-52680 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.