CVE-2023-53242
published 2025-09-15CVE-2023-53242: In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/hisi: Drop second sensor hi3660 The commit 74c8e6bffbe1 ("driver core: Add…
PriorityP419medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.15%
4.6th percentile
In the Linux kernel, the following vulnerability has been resolved:
thermal/drivers/hisi: Drop second sensor hi3660
The commit 74c8e6bffbe1 ("driver core: Add __alloc_size hint to devm
allocators") exposes a panic "BRK handler: Fatal exception" on the
hi3660_thermal_probe funciton.
This is because the function allocates memory for only one
sensors array entry, but tries to fill up a second one.
Fix this by removing the unneeded second access.
Affected
19 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.20-1 (bookworm) | linux 6.1.20-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 7d3a2a2bbadb4bf5856ed394ba09b8fbb7a80460 < 3cf2181e438f43ed24e12424fe36d156cca233b9 | 3cf2181e438f43ed24e12424fe36d156cca233b9 |
| linux | linux | >= 7d3a2a2bbadb4bf5856ed394ba09b8fbb7a80460 < e02bc492883abf751fd1a8d89fc025fbce6744c6 | e02bc492883abf751fd1a8d89fc025fbce6744c6 |
| linux | linux | >= 7d3a2a2bbadb4bf5856ed394ba09b8fbb7a80460 < f5aaf140ab1c02889c088e1b1098adad600541af | f5aaf140ab1c02889c088e1b1098adad600541af |
| linux | linux | >= 7d3a2a2bbadb4bf5856ed394ba09b8fbb7a80460 < 9f6756cd09889c7201ee31e6f76fbd914fb0b80d | 9f6756cd09889c7201ee31e6f76fbd914fb0b80d |
| linux | linux | >= 7d3a2a2bbadb4bf5856ed394ba09b8fbb7a80460 < 68e675a9b69cfc34dd915d91a4650e3ee53421f4 | 68e675a9b69cfc34dd915d91a4650e3ee53421f4 |
| linux | linux | >= 7d3a2a2bbadb4bf5856ed394ba09b8fbb7a80460 < 15cc25829a97c3957e520e971868aacc84341317 | 15cc25829a97c3957e520e971868aacc84341317 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.178-1 | 5.10.178-1 |
| linux | linux_kernel | >= 0 < 6.1.20-1 | 6.1.20-1 |
| linux | linux_kernel | >= 0 < 6.1.20-1 | 6.1.20-1 |
| linux | linux_kernel | >= 0 < 6.1.20-1 | 6.1.20-1 |
| linux | linux_kernel | >= 4.20.1 < 5.4.235 | 5.4.235 |
| linux | linux_kernel | >= 5.11 < 5.15.99 | 5.15.99 |
| linux | linux_kernel | >= 5.16 < 6.1.16 | 6.1.16 |
| linux | linux_kernel | >= 5.5 < 5.10.173 | 5.10.173 |
| linux | linux_kernel | >= 6.2 < 6.2.3 | 6.2.3 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-rcjh-888g-5f4f: In the Linux kernel, the following vulnerability has been resolved:
thermal/drivers/hisi: Drop second sensor hi3660
The commit 74c8e6bffbe1 ("driver
ghsa_unreviewed·2025-09-15
CVE-2023-53242 [MEDIUM] GHSA-rcjh-888g-5f4f: In the Linux kernel, the following vulnerability has been resolved:
thermal/drivers/hisi: Drop second sensor hi3660
The commit 74c8e6bffbe1 ("driver
In the Linux kernel, the following vulnerability has been resolved:
thermal/drivers/hisi: Drop second sensor hi3660
The commit 74c8e6bffbe1 ("driver core: Add __alloc_size hint to devm
allocators") exposes a panic "BRK handler: Fatal exception" on the
hi3660_thermal_probe funciton.
This is because the function allocates memory for only one
sensors array entry, but tries to fill up a second one.
Fix this by removing the unneeded second access.
OSV
CVE-2023-53242: In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/hisi: Drop second sensor hi3660 The commit 74c8e6bffbe1 ("driver c
osv·2025-09-15·CVSS 5.5
CVE-2023-53242 [MEDIUM] CVE-2023-53242: In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/hisi: Drop second sensor hi3660 The commit 74c8e6bffbe1 ("driver c
In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/hisi: Drop second sensor hi3660 The commit 74c8e6bffbe1 ("driver core: Add __alloc_size hint to devm allocators") exposes a panic "BRK handler: Fatal exception" on the hi3660_thermal_probe funciton. This is because the function allocates memory for only one sensors array entry, but tries to fill up a second one. Fix this by removing the unneeded second access.
Red Hat
kernel: thermal/drivers/hisi: Drop second sensor hi3660
vendor_redhat·2025-09-15·CVSS 5.5
CVE-2023-53242 [MEDIUM] CWE-474 kernel: thermal/drivers/hisi: Drop second sensor hi3660
kernel: thermal/drivers/hisi: Drop second sensor hi3660
In the Linux kernel, the following vulnerability has been resolved:
thermal/drivers/hisi: Drop second sensor hi3660
The commit 74c8e6bffbe1 ("driver core: Add __alloc_size hint to devm
allocators") exposes a panic "BRK handler: Fatal exception" on the
hi3660_thermal_probe funciton.
This is because the function allocates memory for only one
sensors array entry, but tries to fill up a second one.
Fix this by removing the unneeded second access.
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (Red Hat Enterprise Linux 8) -
Debian
CVE-2023-53242: linux - In the Linux kernel, the following vulnerability has been resolved: thermal/dri...
vendor_debian·2023·CVSS 5.5
CVE-2023-53242 [MEDIUM] CVE-2023-53242: linux - In the Linux kernel, the following vulnerability has been resolved: thermal/dri...
In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/hisi: Drop second sensor hi3660 The commit 74c8e6bffbe1 ("driver core: Add __alloc_size hint to devm allocators") exposes a panic "BRK handler: Fatal exception" on the hi3660_thermal_probe funciton. This is because the function allocates memory for only one sensors array entry, but tries to fill up a second one. Fix this by removing the unneeded second access.
Scope: local
bookworm: resolved (fixed in 6.1.20-1)
bullseye: resolved (fixed in 5.10.178-1)
forky: resolved (fixed in 6.1.20-1)
sid: resolved (fixed in 6.1.20-1)
trixie: resolved (fixed in 6.1.20-1)
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/15cc25829a97c3957e520e971868aacc84341317https://git.kernel.org/stable/c/3cf2181e438f43ed24e12424fe36d156cca233b9https://git.kernel.org/stable/c/68e675a9b69cfc34dd915d91a4650e3ee53421f4https://git.kernel.org/stable/c/9f6756cd09889c7201ee31e6f76fbd914fb0b80dhttps://git.kernel.org/stable/c/e02bc492883abf751fd1a8d89fc025fbce6744c6https://git.kernel.org/stable/c/f5aaf140ab1c02889c088e1b1098adad600541af
2025-09-15
Published