CVE-2023-53332
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
16/09/2025
Last modified:
17/09/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
genirq/ipi: Fix NULL pointer deref in irq_data_get_affinity_mask()<br />
<br />
If ipi_send_{mask|single}() is called with an invalid interrupt number, all<br />
the local variables there will be NULL. ipi_send_verify() which is invoked<br />
from these functions does verify its &#39;data&#39; parameter, resulting in a<br />
kernel oops in irq_data_get_affinity_mask() as the passed NULL pointer gets<br />
dereferenced.<br />
<br />
Add a missing NULL pointer check in ipi_send_verify()...<br />
<br />
Found by Linux Verification Center (linuxtesting.org) with the SVACE static<br />
analysis tool.