CVE-2023-53987
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
24/12/2025
Última modificación:
29/12/2025
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
ping: Fix potentail NULL deref for /proc/net/icmp.<br />
<br />
After commit dbca1596bbb0 ("ping: convert to RCU lookups, get rid<br />
of rwlock"), we use RCU for ping sockets, but we should use spinlock<br />
for /proc/net/icmp to avoid a potential NULL deref mentioned in<br />
the previous patch.<br />
<br />
Let&#39;s go back to using spinlock there.<br />
<br />
Note we can convert ping sockets to use hlist instead of hlist_nulls<br />
because we do not use SLAB_TYPESAFE_BY_RCU for ping sockets.



