CVE-2023-53005

trace_events_hist: add check for return value of 'create_hist_field'

State: Published
Severity: 5.5 Medium
Published: Mar 27, 2025
Updated: May 11, 2026
Reserved: Mar 27, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

trace_events_hist: add check for return value of 'create_hist_field'

Function 'create_hist_field' is called recursively at trace_events_hist.c:1954 and can return NULL-value that's why we have to check it to avoid null pointer dereference.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	30350d65ac5676c6d08d4fc935bc9a9cb0fd4ed3 to before d2d1ada58e7cc100b8d7d6b082d19321ba4a700aAffected 30350d65ac5676c6d08d4fc935bc9a9cb0fd4ed3 to before 31b2414abeaa6de0490e85164badc6dcb1bb8ec9Affected 30350d65ac5676c6d08d4fc935bc9a9cb0fd4ed3 to before 886aa449235f478e262bbd5dcdee6ed6bc202949Affected 30350d65ac5676c6d08d4fc935bc9a9cb0fd4ed3 to before 592ba7116fa620425725ff0972691f352ba3caf6Affected 30350d65ac5676c6d08d4fc935bc9a9cb0fd4ed3 to before b4e7e81b4fdfcf457daee6b7a61769f62198d840Affected 30350d65ac5676c6d08d4fc935bc9a9cb0fd4ed3 to before 8b152e9150d07a885f95e1fd401fc81af202d9a4Affected
LinuxLinux	4.17Affected before 4.17Not affected 4.19.272 through 4.19.Not affected 5.4.231 through 5.4.Not affected 5.10.166 through 5.10.Not affected 5.15.91 through 5.15.Not affected 6.1.9 through 6.1.*Not affected 6.2 and laterNot affected

Product

Versions

LinuxLinux

30350d65ac5676c6d08d4fc935bc9a9cb0fd4ed3 to before d2d1ada58e7cc100b8d7d6b082d19321ba4a700aAffected
30350d65ac5676c6d08d4fc935bc9a9cb0fd4ed3 to before 31b2414abeaa6de0490e85164badc6dcb1bb8ec9Affected
30350d65ac5676c6d08d4fc935bc9a9cb0fd4ed3 to before 886aa449235f478e262bbd5dcdee6ed6bc202949Affected
30350d65ac5676c6d08d4fc935bc9a9cb0fd4ed3 to before 592ba7116fa620425725ff0972691f352ba3caf6Affected
30350d65ac5676c6d08d4fc935bc9a9cb0fd4ed3 to before b4e7e81b4fdfcf457daee6b7a61769f62198d840Affected
30350d65ac5676c6d08d4fc935bc9a9cb0fd4ed3 to before 8b152e9150d07a885f95e1fd401fc81af202d9a4Affected

LinuxLinux

4.17Affected
before 4.17Not affected
4.19.272 through 4.19.*Not affected
5.4.231 through 5.4.*Not affected
5.10.166 through 5.10.*Not affected
5.15.91 through 5.15.*Not affected
6.1.9 through 6.1.*Not affected
6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.