CVE-2023-53248
BaseFortify
Publication date: 2025-09-15
Last updated on: 2025-12-03
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | From 4.2 (inc) to 6.1.47 (exc) |
| linux | linux_kernel | From 6.2 (inc) to 6.4.12 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-476 | The product dereferences a pointer that it expects to be valid but is NULL. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability in the Linux kernel's drm/amdgpu component involves the handling of fence pointers during CPU updates to page tables. When vm update fences are unused, the code previously set these fence pointers to NULL, which could lead to a NULL pointer dereference when dma_fence_wait() is called on them. The fix installs a stub fence into these potentially unused fence pointers instead of NULL to prevent this NULL dereference.
How can this vulnerability impact me? :
The vulnerability can cause a NULL pointer dereference in the Linux kernel when dma_fence_wait() is called on unused fence pointers set to NULL. This could potentially lead to kernel crashes or system instability when using the affected drm/amdgpu component during CPU page table updates.