CVE-2023-53681
BaseFortify
Publication date: 2025-10-07
Last updated on: 2026-02-26
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | From 5.15.160 (inc) to 5.16 (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-476 | The product dereferences a pointer that it expects to be valid but is NULL. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is in the Linux kernel's bcache component. The function __bch_btree_node_alloc may return NULL in some specific situations, which can lead to a NULL pointer dereference in functions that call it, such as btree_split. The issue was fixed by ensuring the return value in __bch_btree_node_alloc is properly initialized to avoid this inconsistent failure behavior.
How can this vulnerability impact me? :
The vulnerability can cause a NULL pointer dereference in the Linux kernel, which may lead to system instability or crashes when the affected functions are executed. This could potentially disrupt normal system operations or cause denial of service.