CVE-2023-53987
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
24/12/2025
Last modified:
29/12/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
ping: Fix potentail NULL deref for /proc/net/icmp.<br />
<br />
After commit dbca1596bbb0 ("ping: convert to RCU lookups, get rid<br />
of rwlock"), we use RCU for ping sockets, but we should use spinlock<br />
for /proc/net/icmp to avoid a potential NULL deref mentioned in<br />
the previous patch.<br />
<br />
Let&#39;s go back to using spinlock there.<br />
<br />
Note we can convert ping sockets to use hlist instead of hlist_nulls<br />
because we do not use SLAB_TYPESAFE_BY_RCU for ping sockets.