Loading vulnerability…
CVE-2023-52756 was assigned to a Linux kernel PWM subsystem issue described as a double-shift bug. The CVE has subsequently been rejected or withdrawn by the Linux CVE project; it is therefore not a valid upstream vulnerability designation. Available information does not characterize the underlying code path, exploitability, or security consequence sufficiently to assign a CWE or provide a technical vulnerability description.
Mallory correlates every CVE against your assets, your vendors, and active adversary campaigns. Know which vulnerabilities matter for you, not just which ones are loud.
What it means. What to do now. Patch path, mitigations, and the assume-compromise checklist.
Patch, then assume compromise.
No public exploits tracked yet. Mallory keeps watching.
No public exploit code observed for this vulnerability.
2 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
A double-shift bug in the Linux kernel PWM subsystem.
A previously assigned Linux kernel PWM subsystem issue described as a "double shift bug." The content states that the CVE was subsequently rejected upstream, although Red Hat issued errata addressing the issue for supported RHEL releases.
Query your assets running an affected version, and investigate the blast radius.
Every observed campaign linking this CVE to a named adversary.
Malware families riding this exploit, with evidence and IOCs.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Cross-references every affected SKU, including bundled OEM variants.
Community discussion across Reddit, Mastodon, and other social sources.