Critical Vulnerability in Linux Kernel: ACPI Processor Null Pointer Dereference
Summary
DEBIAN-CVE-2023-53483: In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: Check for null return of devm_kzalloc() in fch_misc_setup() devm_kzalloc() may fail, clk_data->name might be NULL and will cause a NULL... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing hardware resources and providing essential services to applications. It supports a wide range of hardware architectures and is known for its stability and performance. However, vulnerabilities can arise, such as the one identified in this report, which affects the ACPI processor functionality, potentially leading to system instability.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the ACPI processor management code. Specifically, the function devm_kzalloc() may fail, leading to a NULL pointer dereference if clk_data->name is NULL. This can cause system crashes or unpredictable behavior, as the kernel may attempt to access memory that has not been allocated. The vulnerability is tracked as CVE-2023-53483 and affects multiple Debian versions of the Linux package.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, no specific workarounds have been provided for this vulnerability. It is recommended to apply the patch as soon as it is available.
Conclusion
The vulnerability identified as CVE-2023-53483 poses a significant risk to systems running affected versions of the Linux kernel. It is crucial for users to update their systems to the patched versions to ensure stability and security. Utilizing tools like Vulert can help in monitoring for such vulnerabilities in real-time.
See every vulnerability recorded for linux →
FAQ
CVE-2023-53483 is a vulnerability in the Linux kernel related to ACPI processor management, which can lead to a NULL pointer dereference.
Debian 11, 12, 13, and 14 are affected by this vulnerability, with specific patched versions available for each.
You can use tools like Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check your application without any signup.
The vulnerability can lead to system crashes or unpredictable behavior due to a NULL pointer dereference in the kernel.
Yes, patches are available for the affected Debian versions. Users should update to the specified patched versions to mitigate the risk.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
