Bug 2395884 (CVE-2023-53332) - CVE-2023-53332 kernel: genirq/ipi: Fix NULL pointer deref in irq_data_get_affinity_mask()
Summary: CVE-2023-53332 kernel: genirq/ipi: Fix NULL pointer deref in irq_data_get_aff...
Keywords:
Status: NEW
Alias: CVE-2023-53332
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2025-09-16 17:04 UTC by OSIDB Bzimport
Modified: 2025-09-16 17:44 UTC (History)
0 users

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2025-09-16 17:04:01 UTC
In the Linux kernel, the following vulnerability has been resolved:

genirq/ipi: Fix NULL pointer deref in irq_data_get_affinity_mask()

If ipi_send_{mask|single}() is called with an invalid interrupt number, all
the local variables there will be NULL. ipi_send_verify() which is invoked
from these functions does verify its 'data' parameter, resulting in a
kernel oops in irq_data_get_affinity_mask() as the passed NULL pointer gets
dereferenced.

Add a missing NULL pointer check in ipi_send_verify()...

Found by Linux Verification Center (linuxtesting.org) with the SVACE static
analysis tool.


Note You need to log in before you can comment on or make changes to this bug.