PT-2025-13330 · Linux+4 · Linux Kernel+4

Published 2023-01-25 · Updated 2025-09-29 · CVE-2023-52984

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A null pointer access issue has been resolved in the Linux kernel, specifically in the dp83822 driver. The probe() function is used only for the DP83822 PHY, leaving the private data pointer uninitialized for the smaller DP83825/26 models. This causes a NULL pointer dereference on the smaller PHYs when configuring the interrupt, as it accesses the private data unchecked. Verifying the pointer avoids this issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALSA-2025_16880

BDU:2025-06239

CVE-2023-52984

OPENSUSE-SU-2025_1195-1

RHSA-2024:2394

RHSA-2024_2394

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1195-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_1195-1

SUSE-SU-2025_1241-1

Affected Products

Astra Linux

Linux Kernel

Red Hat

Red Os

Suse

References · 1336

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52984.json · Exploit
• https://cve.org/CVERecord?id=CVE-2023-52984 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2023-52984 · Vendor Advisory
• https://git.kernel.org/stable/c/422ae7d9c7221e8d4c8526d0f54106307d69d2dc · Patch
• https://ubuntu.com/security/CVE-2023-52984 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1183-1 · Vendor Advisory
• https://git.kernel.org/stable/c/2cd1e9c013ec56421c58921b1ddf1d2d53bd47fa · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://git.kernel.org/stable/c/362a2f5531dc0e5b0b5b3e3a541000dbffa75461 · Patch
• https://security-tracker.debian.org/tracker/CVE-2023-52984 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-52984 · Vendor Advisory
• https://git.kernel.org/stable/c/78901b10522cdf6badf24acf65a892637596bccc · Patch
• https://bdu.fstec.ru/vul/2025-06239 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1195-1 · Vendor Advisory