CVE-2023-53786
Awaiting Analysis Awaiting Analysis - Queue
BaseFortify

Publication date: 2025-12-09

Last updated on: 2025-12-09

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: dm flakey: fix a crash with invalid table line This command will crash with NULL pointer dereference: dmsetup create flakey --table \ "0 `blockdev --getsize /dev/ram0` flakey /dev/ram0 0 0 1 2 corrupt_bio_byte 512" Fix the crash by checking if arg_name is non-NULL before comparing it.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-12-09
Last Modified
2025-12-09
Generated
2026-06-16
AI Q&A
2025-12-09
EPSS Evaluated
2026-06-15
NVD
CVE-2023-53786
Affected Vendors & Products
Currently, no data is known.
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability is a crash in the Linux kernel's device mapper 'flakey' target caused by a NULL pointer dereference when an invalid table line is used. Specifically, the crash occurs if the argument name (arg_name) is NULL and is not checked before comparison, leading to a kernel crash.

Impact Analysis

This vulnerability can cause the Linux kernel to crash, leading to a denial of service on affected systems using the 'flakey' device mapper target with invalid table lines. This could disrupt system availability and stability.

Detection Guidance

This vulnerability can be detected by attempting to run the provided command that triggers the crash: dmsetup create flakey --table "0 `blockdev --getsize /dev/ram0` flakey /dev/ram0 0 0 1 2 corrupt_bio_byte 512". If the system crashes with a NULL pointer dereference, it indicates the presence of the vulnerability.

Mitigation Strategies

To mitigate this vulnerability, avoid running the vulnerable dmsetup command with the specified table line until the system is patched. Apply the fix that checks if arg_name is non-NULL before comparing it, which resolves the crash.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2023-53786. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart