CVE-2023-53242Use of Function with Inconsistent Implementations in Linux

Severity
5.5MEDIUMNVD
EPSS
0.0%
top 95.77%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedSep 15

Description

In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/hisi: Drop second sensor hi3660 The commit 74c8e6bffbe1 ("driver core: Add __alloc_size hint to devm allocators") exposes a panic "BRK handler: Fatal exception" on the hi3660_thermal_probe funciton. This is because the function allocates memory for only one sensors array entry, but tries to fill up a second one. Fix this by removing the unneeded second access.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages4 packages

NVDlinux/linux_kernel4.20.15.4.235+5
Debianlinux/linux_kernel< 5.10.178-1+3
CVEListV5linux/linux7d3a2a2bbadb4bf5856ed394ba09b8fbb7a804603cf2181e438f43ed24e12424fe36d156cca233b9+6
debiandebian/linux< linux 6.1.20-1 (bookworm)

Patches

🔴Vulnerability Details

2
GHSA
GHSA-rcjh-888g-5f4f: In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/hisi: Drop second sensor hi3660 The commit 74c8e6bffbe1 ("driver2025-09-15
OSV
CVE-2023-53242: In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/hisi: Drop second sensor hi3660 The commit 74c8e6bffbe1 ("driver c2025-09-15

📋Vendor Advisories

2
Red Hat
kernel: thermal/drivers/hisi: Drop second sensor hi36602025-09-15
Debian
CVE-2023-53242: linux - In the Linux kernel, the following vulnerability has been resolved: thermal/dri...2023
CVE-2023-53242 — Linux vulnerability | cvebase