PT-2025-40177 · Linux+2 · Linux Kernel+2

Published 2023-05-03 · Updated 2026-03-14 · CVE-2023-53470

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw where a failure from devlink alloc() was not properly handled. Specifically, a check for a NULL return value from the devlink alloc() function was missing. If devlink alloc() failed and the code attempted to use devlink priv() on the resulting NULL pointer, the kernel would panic. The fix adds a check for NULL on the allocation return, preventing the kernel panic and causing the driver load to fail instead.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Unchecked Return Value

NULL Pointer Dereference

Weakness Enumeration

CWE-252

CWE-476

Related Identifiers

ALSA-2025_12746

ALSA-2025_12752

ALSA-2025_12753

ALSA-2025_16880

BDU:2026-06101

CVE-2023-53470

RHSA-2024:9315

RHSA-2024_9315

Affected Products

Debian

Linux Kernel

Red Hat

References · 22

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53470.json · Exploit
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2023-53470 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-53470 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-06101 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2023-53470 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-53470 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53470 · Vendor Advisory
• https://git.kernel.org/stable/c/0020c16c8af7f4bc9503a2088fb30793b6771fac · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53470 · Vendor Advisory
• https://git.kernel.org/stable/c/0d02efe7f25158c93146e3bb827bc7bb3cd5e71a · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-53470 · Security Note
• https://osv.dev/vulnerability/CVE-2023-53470 · Vendor Advisory
• https://git.kernel.org/stable/c/4a54903ff68ddb33b6463c94b4eb37fc584ef760 · Patch
• https://git.kernel.org/stable/c/5325f50de5b1433b27dda7ccff5cb7283722a3f1 · Patch
• https://git.kernel.org/stable/c/c177dd465f5c1e5f242cdb9258826c591c257e9a · Patch