CVE-2023-53364

Severity CVSS v4.0:

Pending analysis

Type:

CWE-476 NULL Pointer Dereference

Publication date:

17/09/2025

Last modified:

14/01/2026

Description

In the Linux kernel, the following vulnerability has been resolved: regulator: da9063: better fix null deref with partial DT Two versions of the original patch were sent but V1 was merged instead of V2 due to a mistake. So update to V2. The advantage of V2 is that it completely avoids dereferencing the pointer, even just to take the address, which may fix problems with some compilers. Both versions work on my gcc 9.4 but use the safer one.

Impact

Vector 3.x

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS v3.1 Severity and Metrics:

Base Score: 5.50 MEDIUM
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): Low
User Interaction (UI): None
Scope (S): Unchanged
Confidentiality (C): None
Integrity (I): None
Availability (A): High

Base Score 3.x

5.50

Severity 3.x

MEDIUM

Vulnerable products and versions

CPE	From	Up to
cpe:2.3:o:linux:linux_kernel::::::::	6.4.7 (including)	6.4.12 (excluding)
cpe:2.3:o:linux:linux_kernel:6.5:rc3::::::
cpe:2.3:o:linux:linux_kernel:6.5:rc4::::::
cpe:2.3:o:linux:linux_kernel:6.5:rc5::::::
cpe:2.3:o:linux:linux_kernel:6.5:rc6::::::

To consult the complete list of CPE names with products and versions, see this page

CVE-2023-53364

Description

Impact

Vulnerable products and versions

References to Advisories, Solutions, and Tools