CVE-2023-53250 — NULL Pointer Dereference in Linux

CWE-476 — NULL Pointer Dereference5 documents5 sources
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 95.55%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
LinuxLinux KernelDebian Linux
Timeline
PublishedSep 15

Description

In the Linux kernel, the following vulnerability has been resolved: firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle KASAN reported a null-ptr-deref error: KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] CPU: 0 PID: 1373 Comm: modprobe Hardware name: QEMU Standard PC (i440FX + PIIX, 1996) RIP: 0010:dmi_sysfs_entry_release ... Call Trace: kobject_put dmi_sysfs_register_handle (drivers/firmware/dmi-sysfs.c:540) dmi_sysfs dmi_decode_table (drivers/firm…

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages4 packages

▶NVDlinux/linux_kernel4.9.318 — 4.10+8
▶Debianlinux/linux_kernel< 6.1.20-1+2
▶CVEListV5linux/linuxfdffa4ad8f6bf1ece877edfb807f2b2c729d8578 — b4fe158259fb5fead52ff2b55841ec5c39492604+11
▶debiandebian/linux< linux 6.1.20-1 (bookworm)

Patches

Patch: git.kernel.org ↗Patch: git.kernel.org ↗Patch: git.kernel.org ↗

🔴Vulnerability Details

2
OSV
CVE-2023-53250: In the Linux kernel, the following vulnerability has been resolved: firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle KASAN reporte↗2025-09-15
▶
GHSA
GHSA-m84q-m2jg-26h3: In the Linux kernel, the following vulnerability has been resolved: firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle KASAN repor↗2025-09-15
▶

📋Vendor Advisories

2
Red Hat
kernel: firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle↗2025-09-15
▶
Debian
CVE-2023-53250: linux - In the Linux kernel, the following vulnerability has been resolved: firmware: d...↗2023
▶
CVE-2023-53250 — NULL Pointer Dereference in Linux | cvebase