{"id":"DEBIAN-CVE-2023-52994","details":"In the Linux kernel, the following vulnerability has been resolved:  acpi: Fix suspend with Xen PV  Commit f1e525009493 (\"x86/boot: Skip realmode init code when running as Xen PV guest\") missed one code path accessing real_mode_header, leading to dereferencing NULL when suspending the system under Xen:      [  348.284004] PM: suspend entry (deep)     [  348.289532] Filesystems sync: 0.005 seconds     [  348.291545] Freezing user space processes ... (elapsed 0.000 seconds) done.     [  348.292457] OOM killer disabled.     [  348.292462] Freezing remaining freezable tasks ... (elapsed 0.104 seconds) done.     [  348.396612] printk: Suspending console(s) (use no_console_suspend to debug)     [  348.749228] PM: suspend devices took 0.352 seconds     [  348.769713] ACPI: EC: interrupt blocked     [  348.816077] BUG: kernel NULL pointer dereference, address: 000000000000001c     [  348.816080] #PF: supervisor read access in kernel mode     [  348.816081] #PF: error_code(0x0000) - not-present page     [  348.816083] PGD 0 P4D 0     [  348.816086] Oops: 0000 [#1] PREEMPT SMP NOPTI     [  348.816089] CPU: 0 PID: 6764 Comm: systemd-sleep Not tainted 6.1.3-1.fc32.qubes.x86_64 #1     [  348.816092] Hardware name: Star Labs StarBook/StarBook, BIOS 8.01 07/03/2022     [  348.816093] RIP: e030:acpi_get_wakeup_address+0xc/0x20  Fix that by adding an optional acpi callback allowing to skip setting the wakeup address, as in the Xen PV case this will be handled by the hypervisor anyway.","modified":"2026-09-15T09:03:01.835757110Z","published":"2025-03-27T17:15:47.053Z","upstream":["CVE-2023-52994"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2023-52994"}],"affected":[{"package":{"name":"linux","ecosystem":"Debian:12","purl":"pkg:deb/debian/linux?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.11-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2023-52994.json"}},{"package":{"name":"linux","ecosystem":"Debian:13","purl":"pkg:deb/debian/linux?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.11-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2023-52994.json"}},{"package":{"name":"linux","ecosystem":"Debian:14","purl":"pkg:deb/debian/linux?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.11-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2023-52994.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}]}