PT-2025-41108 · Linux+1 · Linux Kernel+1

Published 2023-07-24 · Updated 2025-10-08 · CVE-2023-53664

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel related to a potential null pointer dereference within the dev pm opp get required pstate() function. The issue occurs because the opp pointer is dereferenced before a check to determine if it is an error or null. The fix involves removing the unnecessary dereference of the opp table cache and directly dereferencing it where it is used. This addresses a smatch warning indicating the potential for dereferencing a variable before an error check.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALSA-2025_16880

BDU:2026-03819

CVE-2023-53664

RHSA-2024:2394

RHSA-2024_2394

Affected Products

Linux Kernel

Red Hat

References · 19

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53664.json · Exploit
• https://security-tracker.debian.org/tracker/CVE-2023-53664 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-53664 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53664 · Vendor Advisory
• https://git.kernel.org/stable/c/25130b27e0352acb83e91c467853eb9afad3b644 · Patch
• https://ubuntu.com/security/CVE-2023-53664 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-53664 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-53664 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53664 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-03819 · Security Note
• https://git.kernel.org/stable/c/7ddd8deb1c3c0363a7e14fafb5df26e2089a69a5 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-53664 · Security Note
• https://access.redhat.com/security/cve/cve-2023-53664 · Note
• https://lore.kernel.org/linux-cve-announce/2025100703-CVE-2023-53664-a38d@gregkh/T · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note