PT-2025-38028 · Linux+2 · Linux Kernel+2

Published 2025-09-16 · Updated 2025-09-17 · CVE-2023-53310

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the fuel gauge external power changed() function within the axp288 fuel gauge driver. This occurs because the function dereferences info->bat before it is guaranteed to be set by devm power supply register(). Specifically, the external power changed callback can be invoked before info->bat is initialized, leading to a NULL pointer dereference. The issue is resolved by utilizing the psy argument passed to fuel gauge external power changed(), which is always valid.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

CVE-2023-53310

Affected Products

Astra Linux

Linux Kernel

Axp288 Fuel Gauge

References · 16

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53310.json · Exploit
• https://git.kernel.org/stable/c/f8319774d6f1567d6e7d03653174ab0c82c5c66d · Patch
• https://cve.org/CVERecord?id=CVE-2023-53310 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53310 · Vendor Advisory
• https://git.kernel.org/stable/c/a636c6ba9ce898207f283271cb28511206ab739b · Patch
• https://osv.dev/vulnerability/CVE-2023-53310 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53310 · Security Note
• https://ubuntu.com/security/CVE-2023-53310 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-53310 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53310 · Vendor Advisory
• https://git.kernel.org/stable/c/0456b912121e45b3ef54abe3135e5dcb541f956c · Patch
• https://osv.dev/vulnerability/BELL-CVE-2023-53310 · Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://twitter.com/CVEnew/status/1968190816343466093 · Twitter Post
• https://docs.bell-sw.com/security/cves/CVE-2023-53310 · Note