CVE-2023-53480
published 2025-10-01CVE-2023-53480: In the Linux kernel, the following vulnerability has been resolved: kobject: Add sanity check for kset->kobj.ktype in kset_register() When I register a kset in…
PriorityP419medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.15%
4.3th percentile
In the Linux kernel, the following vulnerability has been resolved:
kobject: Add sanity check for kset->kobj.ktype in kset_register()
When I register a kset in the following way:
static struct kset my_kset;
kobject_set_name(&my_kset.kobj, "my_kset");
ret = kset_register(&my_kset);
A null pointer dereference exception is occurred:
[ 4453.568337] Unable to handle kernel NULL pointer dereference at \
virtual address 0000000000000028
... ...
[ 4453.810361] Call trace:
[ 4453.813062] kobject_get_ownership+0xc/0x34
[ 4453.817493] kobject_add_internal+0x98/0x274
[ 4453.822005] kset_register+0x5c/0xb4
[ 4453.825820] my_kobj_init+0x44/0x1000 [my_kset]
... ...
Because I didn't initialize my_kset.kobj.ktype.
According to the description in Documentation/core-api/kobject.rst:
- A ktype is the type of object that embeds a kobject. Every structure
that embeds a kobject needs a corresponding ktype.
So add sanity check to make sure kset->kobj.ktype is not NULL.
Affected
19 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.55-1 (bookworm) | linux 6.1.55-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 5f81880d5204ee2388fd9a75bb850ccd526885b7 < 039ec9db2d30032eafa365f5f89b30eca5322b05 | 039ec9db2d30032eafa365f5f89b30eca5322b05 |
| linux | linux | >= 5f81880d5204ee2388fd9a75bb850ccd526885b7 < 964e025ceefdf75da46b0133d0c2790de451aeec | 964e025ceefdf75da46b0133d0c2790de451aeec |
| linux | linux | >= 5f81880d5204ee2388fd9a75bb850ccd526885b7 < 5df5829158513134ddcaf2184d9286eda7b0bb18 | 5df5829158513134ddcaf2184d9286eda7b0bb18 |
| linux | linux | >= 5f81880d5204ee2388fd9a75bb850ccd526885b7 < f3f6bf22a4f5ba649cf26ae4670de5c7f861bdef | f3f6bf22a4f5ba649cf26ae4670de5c7f861bdef |
| linux | linux | >= 5f81880d5204ee2388fd9a75bb850ccd526885b7 < 48aebbe801e78a8932404c122ed0e880ccedc220 | 48aebbe801e78a8932404c122ed0e880ccedc220 |
| linux | linux | >= 5f81880d5204ee2388fd9a75bb850ccd526885b7 < 1a772881bc059c596d8ca587cbd2a233edce3d3b | 1a772881bc059c596d8ca587cbd2a233edce3d3b |
| linux | linux | >= 5f81880d5204ee2388fd9a75bb850ccd526885b7 < 4d0fe8c52bb3029d83e323c961221156ab98680b | 4d0fe8c52bb3029d83e323c961221156ab98680b |
| linux | linux_kernel | >= 0 < 5.10.197-1 | 5.10.197-1 |
| linux | linux_kernel | >= 0 < 6.1.55-1 | 6.1.55-1 |
| linux | linux_kernel | >= 0 < 6.5.6-1 | 6.5.6-1 |
| linux | linux_kernel | >= 0 < 6.5.6-1 | 6.5.6-1 |
| linux | linux_kernel | >= 4.19 < 4.19.295 | 4.19.295 |
| linux | linux_kernel | >= 4.20 < 5.4.257 | 5.4.257 |
| linux | linux_kernel | >= 5.11 < 5.15.133 | 5.15.133 |
| linux | linux_kernel | >= 5.16 < 6.1.55 | 6.1.55 |
| linux | linux_kernel | >= 5.5 < 5.10.197 | 5.10.197 |
| linux | linux_kernel | >= 6.2 < 6.5.5 | 6.5.5 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2023-53480: In the Linux kernel, the following vulnerability has been resolved: kobject: Add sanity check for kset->kobj
osv·2025-10-01·CVSS 5.5
CVE-2023-53480 [MEDIUM] CVE-2023-53480: In the Linux kernel, the following vulnerability has been resolved: kobject: Add sanity check for kset->kobj
In the Linux kernel, the following vulnerability has been resolved: kobject: Add sanity check for kset->kobj.ktype in kset_register() When I register a kset in the following way: static struct kset my_kset; kobject_set_name(&my_kset.kobj, "my_kset"); ret = kset_register(&my_kset); A null pointer dereference exception is occurred: [ 4453.568337] Unable to handle kernel NULL pointer dereference at \ virtual address 0000000000000028 ... ... [ 4453.810361] Call trace: [ 4453.813062] kobject_get_ownership+0xc/0x34 [ 4453.817493] kobject_add_internal+0x98/0x274 [ 4453.822005] kset_register+0x5c/0xb4 [ 4453.825820] my_kobj_init+0x44/0x1000 [my_kset] ... ... Because I didn't initialize my_kset.kobj.ktype. According to the description in Documentation/core-api/kobject.rst: - A ktype is the type of
GHSA
GHSA-8xg4-jw8q-mm7v: In the Linux kernel, the following vulnerability has been resolved:
kobject: Add sanity check for kset->kobj
ghsa_unreviewed·2025-10-01
CVE-2023-53480 [MEDIUM] CWE-476 GHSA-8xg4-jw8q-mm7v: In the Linux kernel, the following vulnerability has been resolved:
kobject: Add sanity check for kset->kobj
In the Linux kernel, the following vulnerability has been resolved:
kobject: Add sanity check for kset->kobj.ktype in kset_register()
When I register a kset in the following way:
static struct kset my_kset;
kobject_set_name(&my_kset.kobj, "my_kset");
ret = kset_register(&my_kset);
A null pointer dereference exception is occurred:
[ 4453.568337] Unable to handle kernel NULL pointer dereference at \
virtual address 0000000000000028
... ...
[ 4453.810361] Call trace:
[ 4453.813062] kobject_get_ownership+0xc/0x34
[ 4453.817493] kobject_add_internal+0x98/0x274
[ 4453.822005] kset_register+0x5c/0xb4
[ 4453.825820] my_kobj_init+0x44/0x1000 [my_kset]
... ...
Because I didn't initialize my_kset.kobj.ktype.
According to the description in Documentation/core-api/kobject.rst:
- A ktype is the typ
Red Hat
kernel: kobject: Add sanity check for kset->kobj.ktype in kset_register()
vendor_redhat·2025-10-01·CVSS 5.5
CVE-2023-53480 [MEDIUM] CWE-476 kernel: kobject: Add sanity check for kset->kobj.ktype in kset_register()
kernel: kobject: Add sanity check for kset->kobj.ktype in kset_register()
In the Linux kernel, the following vulnerability has been resolved:
kobject: Add sanity check for kset->kobj.ktype in kset_register()
When I register a kset in the following way:
static struct kset my_kset;
kobject_set_name(&my_kset.kobj, "my_kset");
ret = kset_register(&my_kset);
A null pointer dereference exception is occurred:
[ 4453.568337] Unable to handle kernel NULL pointer dereference at \
virtual address 0000000000000028
... ...
[ 4453.810361] Call trace:
[ 4453.813062] kobject_get_ownership+0xc/0x34
[ 4453.817493] kobject_add_internal+0x98/0x274
[ 4453.822005] kset_register+0x5c/0xb4
[ 4453.825820] my_kobj_init+0x44/0x1000 [my_kset]
... ...
Because I didn't initialize my_kset.kobj.ktype.
According to the d
Debian
CVE-2023-53480: linux - In the Linux kernel, the following vulnerability has been resolved: kobject: Ad...
vendor_debian·2023·CVSS 5.5
CVE-2023-53480 [MEDIUM] CVE-2023-53480: linux - In the Linux kernel, the following vulnerability has been resolved: kobject: Ad...
In the Linux kernel, the following vulnerability has been resolved: kobject: Add sanity check for kset->kobj.ktype in kset_register() When I register a kset in the following way: static struct kset my_kset; kobject_set_name(&my_kset.kobj, "my_kset"); ret = kset_register(&my_kset); A null pointer dereference exception is occurred: [ 4453.568337] Unable to handle kernel NULL pointer dereference at \ virtual address 0000000000000028 ... ... [ 4453.810361] Call trace: [ 4453.813062] kobject_get_ownership+0xc/0x34 [ 4453.817493] kobject_add_internal+0x98/0x274 [ 4453.822005] kset_register+0x5c/0xb4 [ 4453.825820] my_kobj_init+0x44/0x1000 [my_kset] ... ... Because I didn't initialize my_kset.kobj.ktype. According to the description in Documentation/core-api/kobject.rst: - A ktype is the type of
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/039ec9db2d30032eafa365f5f89b30eca5322b05https://git.kernel.org/stable/c/1a772881bc059c596d8ca587cbd2a233edce3d3bhttps://git.kernel.org/stable/c/48aebbe801e78a8932404c122ed0e880ccedc220https://git.kernel.org/stable/c/4d0fe8c52bb3029d83e323c961221156ab98680bhttps://git.kernel.org/stable/c/5df5829158513134ddcaf2184d9286eda7b0bb18https://git.kernel.org/stable/c/964e025ceefdf75da46b0133d0c2790de451aeechttps://git.kernel.org/stable/c/f3f6bf22a4f5ba649cf26ae4670de5c7f861bdef
2025-10-01
Published