PT-2025-40707 · Linux+1 · Linux Kernel+1

Published 2025-10-04 · Updated 2025-10-07 · CVE-2023-53565

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the brcmfmac module where the probe() function may receive a NULL id argument. This can occur during device reprobing after power management transitions or when manually binding the driver through sysfs. This issue can lead to a kernel NULL pointer dereference, resulting in an oops and potentially causing the Wi-Fi functionality to stop working. The issue was observed on Dell XPS 13 9350 hardware. The fix involves checking for a NULL id argument and attempting a manual lookup of the id in PCI and USB cases. For SDIO, the function will error out if the id is NULL.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2023-53565

Affected Products

Dell Xps 13 9350

Linux Kernel

References · 15

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53565.json · Exploit
• https://security-tracker.debian.org/tracker/CVE-2023-53565 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-53565 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53565 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-53565 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53565 · Vendor Advisory
• https://git.kernel.org/stable/c/84766e77a5c35e2b60e34f570c62fc97adc05e09 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-53565 · Security Note
• https://ubuntu.com/security/CVE-2023-53565 · Vendor Advisory
• https://git.kernel.org/stable/c/60fc756fc8e6954a5618eecac73b255d651602e4 · Patch
• https://osv.dev/vulnerability/CVE-2023-53565 · Vendor Advisory
• https://docs.bell-sw.com/security/cves/CVE-2023-53565 · Note
• https://git.kernel.org/linus/60fc756fc8e6954a5618eecac73b255d651602e4 · Note
• https://twitter.com/CVEnew/status/1974496690158670086 · Twitter Post
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note