PT-2025-38050 · Linux+2 · Linux Kernel+2

Published 2023-01-01 · Updated 2026-04-20 · CVE-2023-53332

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel related to inter-processor interrupts (IPIs). Specifically, a NULL pointer dereference can occur in the irq data get affinity mask() function when ipi send {mask|single}() is called with an invalid interrupt number. This can lead to a kernel oops as the NULL pointer is dereferenced during verification in the ipi send verify() function. The issue was discovered by the Linux Verification Center using the SVACE static analysis tool.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

AZL-71888

BDU:2026-05894

CVE-2023-53332

OESA-2025-2348

OESA-2025-2349

SUSE-SU-2025:03614-1

SUSE-SU-2025:03615-1

SUSE-SU-2025:3761-1

Affected Products

Debian

Linux Kernel

Suse

References · 985

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53332.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-50312 · Security Note
• https://git.kernel.org/stable/c/feabecaff5902f896531dde90646ca5dfa9d4f7d · Patch
• https://git.kernel.org/stable/c/926aef60ea64cd9becf2829f7388f48dbe8bcb11 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-38695 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53174 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50343 · Security Note
• https://git.kernel.org/stable/c/7448c73d64075051f50caed2c62f46553b69ab8a · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-50313 · Security Note
• https://ubuntu.com/security/CVE-2023-53332 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2023-53332 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03615-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-39773 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:03614-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-53332 · Vendor Advisory