CVE-2023-53561 — NULL Pointer Dereference in Linux

CWE-476 — NULL Pointer Dereference5 documents5 sources
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 98.22%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
LinuxLinux KernelDebian Linux
Timeline
PublishedOct 4

Description

In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: fix NULL pointer dereference when removing device In suspend and resume cycle, the removal and rescan of device ends up in NULL pointer dereference. During driver initialization, if the ipc_imem_wwan_channel_init() fails to get the valid device capabilities it returns an error and further no resource (wwan struct) will be allocated. Now in this situation if driver removal procedure is initiated it would resul…

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages4 packages

▶NVDlinux/linux_kernel5.14 — 6.1.30+2
▶Debianlinux/linux_kernel< 6.1.37-1+2
▶CVEListV5linux/linux3670970dd8c661c10c10c300d726f59428eaad32 — ee44bacf462db3ec6e4f0dcfa7931e768670d77c+3
▶debiandebian/linux< linux 6.1.37-1 (bookworm)

Patches

Patch: git.kernel.org ↗Patch: git.kernel.org ↗Patch: git.kernel.org ↗

🔴Vulnerability Details

2
OSV
CVE-2023-53561: In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: fix NULL pointer dereference when removing device In suspend and↗2025-10-04
▶
GHSA
GHSA-44pm-q7mw-v83g: In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: fix NULL pointer dereference when removing device In suspend an↗2025-10-04
▶

📋Vendor Advisories

2
Red Hat
kernel: net: wwan: iosm: fix NULL pointer dereference when removing device↗2025-10-04
▶
Debian
CVE-2023-53561: linux - In the Linux kernel, the following vulnerability has been resolved: net: wwan: ...↗2023
▶