Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

CVE-2023-53834

Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
09/12/2025
Última modificación:
09/12/2025

Descripción

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> iio: adc: ina2xx: avoid NULL pointer dereference on OF device match<br /> <br /> The affected lines were resulting in a NULL pointer dereference on our<br /> platform because the device tree contained the following list of<br /> compatible strings:<br /> <br /> power-sensor@40 {<br /> compatible = "ti,ina232", "ti,ina231";<br /> ...<br /> };<br /> <br /> Since the driver doesn&amp;#39;t declare a compatible string "ti,ina232", the OF<br /> matching succeeds on "ti,ina231". But the I2C device ID info is<br /> populated via the first compatible string, cf. modalias population in<br /> of_i2c_get_board_info(). Since there is no "ina232" entry in the legacy<br /> I2C device ID table either, the struct i2c_device_id *id pointer in the<br /> probe function is NULL.<br /> <br /> Fix this by using the already populated type variable instead, which<br /> points to the proper driver data. Since the name is also wanted, add a<br /> generic one to the ina2xx_config table.

Impacto