CVE-2023-52863
hwmon: (axi-fan-control) Fix possible NULL pointer dereference
MEDIUM 5.5
At a glance
- Source
- NVD
- EPSS
- EPSS 0.24 % · percentile 15 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Analyzed
Description
In the Linux kernel, the following vulnerability has been resolved: hwmon: (axi-fan-control) Fix possible NULL pointer dereference axi_fan_control_irq_handler(), dependent on the private axi_fan_control_data structure, might be called before the hwmon device is registered. That will cause an "Unable to handle kernel NULL pointer dereference" error.
Weaknesses (CWE)
- CWE-476 — NULL Pointer Dereference
References
- https://git.kernel.org/stable/c/7d870088db4863c514a7f8751cd593751983029a
- https://git.kernel.org/stable/c/b3e7eb23a6e97642ff3190431c06475d9ca1e062
- https://git.kernel.org/stable/c/33de53a2706066d526173dc743faf43d92c62105
- https://git.kernel.org/stable/c/f62b8969847850ba7596cb145cc47c65ea57dae0
- https://git.kernel.org/stable/c/c49f14cc1bb12c625a1c572e8a95b6adefd4d8eb
- https://git.kernel.org/stable/c/2a5b3370a1d9750eca325292e291c8c7cb8cf2e0
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2023-59576
- GCVE · GCVE-0-2023-52863
CERT-FR advisories
- CERTFR-2024-AVI-0717 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0693 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0632 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.7 < 5.10.201cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.11 < 5.15.139cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.16 < 6.1.63cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.2 < 6.5.12cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.6 < 6.6.2
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected 8412b410fa5e1e494a0fec84c3c462d49870d3f5 < 7d870088db4863c514a7f8751cd593751983029a ; affected 8412b410fa5e1e494a0fec84c3c462d49870d3f5 < b3e7eb23a6e97642ff3190431c06475d9ca1e062 ; affected 8412b410fa5e1e494a0fec84c3c462d49870d3f5 < 33de53a2706066d526173dc743faf43d92c62105 ; affected 8412b410fa5e1e494a0fec84c3c462d49870d3f5 < f62b8969847850ba7596cb145cc47c65ea57dae0 ; affected 8412b410fa5e1e494a0fec84c3c462d49870d3f5 < c49f14cc1bb12c625a1c572e8a95b6adefd4d8eb ; affected 8412b410fa5e1e494a0fec84c3c462d49870d3f5 < 2a5b3370a1d9750eca325292e291c8c7cb8cf2e0 |
| Linux · Linux | affected 5.7 ; unaffected 0 < 5.7 ; unaffected 5.10.201 ≤ 5.10.* ; unaffected 5.15.139 ≤ 5.15.* ; unaffected 6.1.63 ≤ 6.1.* ; unaffected 6.5.12 ≤ 6.5.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |