Bug 2420253 (CVE-2023-53786) - CVE-2023-53786 kernel: dm flakey: fix a crash with invalid table line
Summary: CVE-2023-53786 kernel: dm flakey: fix a crash with invalid table line
Keywords:
Status: NEW
Alias: CVE-2023-53786
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2025-12-09 01:03 UTC by OSIDB Bzimport
Modified: 2025-12-10 07:03 UTC (History)
0 users

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2025-12-09 01:03:29 UTC 
In the Linux kernel, the following vulnerability has been resolved:

dm flakey: fix a crash with invalid table line

This command will crash with NULL pointer dereference:
 dmsetup create flakey --table \
  "0 `blockdev --getsize /dev/ram0` flakey /dev/ram0 0 0 1 2 corrupt_bio_byte 512"

Fix the crash by checking if arg_name is non-NULL before comparing it.
Comment 1 Alexander B 2025-12-10 06:58:48 UTC 
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025120940-CVE-2023-53786-3c1a@gregkh/T
Note You need to log in before you can comment on or make changes to this bug.