PT-2023-9758 · Linux+4 · Linux Kernel+4
Yihang Li
·
Publicado
2023-09-21
·
Atualizado
2026-03-14
·
CVE-2023-52808
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The vulnerability is related to the
hisi sas component in the Linux kernel. It occurs when the init debugfs fails during device registration due to memory allocation failure, causing debugfs remove recursive() to be called without setting debugfs dir to NULL. As a result, debugfs remove recursive() is called again during device removal, leading to an illegal pointer access. This can cause a kernel NULL pointer dereference, resulting in a denial of service.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
NULL Pointer Dereference
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Astra Linux
Debian
Linux Kernel
Red Os
Suse