CVE-2023-53480
BaseFortify
Publication date: 2025-10-01
Last updated on: 2025-10-02
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | From 5.15.160 (inc) to 5.16 (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability occurs in the Linux kernel when registering a kset without initializing the kset->kobj.ktype field. The ktype represents the type of object embedding the kobject, and if it is NULL, a null pointer dereference happens during kset registration, causing a kernel crash.
How can this vulnerability impact me? :
This vulnerability can cause a kernel NULL pointer dereference, leading to a system crash or denial of service when a kset is registered without proper initialization. This can affect system stability and availability.
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability can be detected by monitoring kernel logs for null pointer dereference exceptions related to kset registration. Specifically, look for messages like 'Unable to handle kernel NULL pointer dereference at virtual address 0000000000000028' and call traces involving kobject_get_ownership, kobject_add_internal, and kset_register. You can use the command 'dmesg | grep -i "kset_register"' or 'journalctl -k | grep -i "kset_register"' to find such kernel log entries.
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, ensure that any kset registration code initializes the kobj.ktype field properly before calling kset_register. Adding a sanity check to verify that kset->kobj.ktype is not NULL before registration will prevent the null pointer dereference. If you are using third-party modules or code, update them to include this initialization or apply patches that add this sanity check.