CVE-2023-53834
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
09/12/2025
Última modificación:
09/12/2025
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
iio: adc: ina2xx: avoid NULL pointer dereference on OF device match<br />
<br />
The affected lines were resulting in a NULL pointer dereference on our<br />
platform because the device tree contained the following list of<br />
compatible strings:<br />
<br />
power-sensor@40 {<br />
compatible = "ti,ina232", "ti,ina231";<br />
...<br />
};<br />
<br />
Since the driver doesn&#39;t declare a compatible string "ti,ina232", the OF<br />
matching succeeds on "ti,ina231". But the I2C device ID info is<br />
populated via the first compatible string, cf. modalias population in<br />
of_i2c_get_board_info(). Since there is no "ina232" entry in the legacy<br />
I2C device ID table either, the struct i2c_device_id *id pointer in the<br />
probe function is NULL.<br />
<br />
Fix this by using the already populated type variable instead, which<br />
points to the proper driver data. Since the name is also wanted, add a<br />
generic one to the ina2xx_config table.



