PT-2023-8720 · Linux+4 · Linux Kernel+4
Lukasz Luba
+2
·
Published
2023-12-15
·
Updated
2025-09-29
·
CVE-2023-52473
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to a NULL pointer dereference in the zone registration error path of the thermal core in the Linux kernel. If
device register() in thermal zone device register with trips() returns an error, the tz variable is set to NULL and subsequently dereferenced in kfree(tz->tzp). This problem arose from a commit intended to avoid a double-free after dropping the reference to the zone device, but it became redundant after another commit changed the behavior of thermal zone device unregister(). The vulnerability can be exploited by a remote attacker to cause a denial of service.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linuxmint
Linux Kernel
Red Hat
Red Os
Ubuntu