PT-2025-18802 · Linux+5 · Linux Kernel+5

Publicado

2023-02-27

·

Atualizado

2026-03-14

·

CVE-2023-53038

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A vulnerability in the Linux kernel has been resolved. The issue is related to the lpfc sli4 cgn params read() function, where a failed kzalloc() call could lead to a NULL pointer dereference. The lpfc read object() function returns an error to prevent this, but the error code has been changed from -ENODEV to a more appropriate -ENOMEM.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

ALSA-2025_16880
BDU:2025-05361
CVE-2023-53038
RHSA-2023:6583
RHSA-2023_6583
SUSE-SU-2025:01918-1
SUSE-SU-2025:01966-1
SUSE-SU-2025:02173-1
SUSE-SU-2025:02262-1
SUSE-SU-2025:2173-1
SUSE-SU-2025_02173-1
SUSE-SU-2025_02262-1

Produtos afetados

Astra Linux
Debian
Linux Kernel
Red Hat
Red Os
Suse