CVE-2023-53242

thermal/drivers/hisi: Drop second sensor hi3660

State: Published
Severity: 7.1 High
Published: Sep 15, 2025
Updated: Aug 5, 2026
Reserved: Sep 15, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

thermal/drivers/hisi: Drop second sensor hi3660

The commit 74c8e6bffbe1 ("driver core: Add __alloc_size hint to devm allocators") exposes a panic "BRK handler: Fatal exception" on the hi3660_thermal_probe funciton. This is because the function allocates memory for only one sensors array entry, but tries to fill up a second one.

Fix this by removing the unneeded second access.

Scores

CVSS	Score	Vector	Source
3.1	7.1 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H	Linux
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	7d3a2a2bbadb4bf5856ed394ba09b8fbb7a80460 to before 3cf2181e438f43ed24e12424fe36d156cca233b9Affected 7d3a2a2bbadb4bf5856ed394ba09b8fbb7a80460 to before e02bc492883abf751fd1a8d89fc025fbce6744c6Affected 7d3a2a2bbadb4bf5856ed394ba09b8fbb7a80460 to before f5aaf140ab1c02889c088e1b1098adad600541afAffected 7d3a2a2bbadb4bf5856ed394ba09b8fbb7a80460 to before 9f6756cd09889c7201ee31e6f76fbd914fb0b80dAffected 7d3a2a2bbadb4bf5856ed394ba09b8fbb7a80460 to before 68e675a9b69cfc34dd915d91a4650e3ee53421f4Affected 7d3a2a2bbadb4bf5856ed394ba09b8fbb7a80460 to before 15cc25829a97c3957e520e971868aacc84341317Affected
LinuxLinux	4.20Affected before 4.20Not affected 5.4.235 through 5.4.Not affected 5.10.173 through 5.10.Not affected 5.15.99 through 5.15.Not affected 6.1.16 through 6.1.Not affected 6.2.3 through 6.2.*Not affected 6.3 and laterNot affected

Product

Versions

LinuxLinux

7d3a2a2bbadb4bf5856ed394ba09b8fbb7a80460 to before 3cf2181e438f43ed24e12424fe36d156cca233b9Affected
7d3a2a2bbadb4bf5856ed394ba09b8fbb7a80460 to before e02bc492883abf751fd1a8d89fc025fbce6744c6Affected
7d3a2a2bbadb4bf5856ed394ba09b8fbb7a80460 to before f5aaf140ab1c02889c088e1b1098adad600541afAffected
7d3a2a2bbadb4bf5856ed394ba09b8fbb7a80460 to before 9f6756cd09889c7201ee31e6f76fbd914fb0b80dAffected
7d3a2a2bbadb4bf5856ed394ba09b8fbb7a80460 to before 68e675a9b69cfc34dd915d91a4650e3ee53421f4Affected
7d3a2a2bbadb4bf5856ed394ba09b8fbb7a80460 to before 15cc25829a97c3957e520e971868aacc84341317Affected

LinuxLinux

4.20Affected
before 4.20Not affected
5.4.235 through 5.4.*Not affected
5.10.173 through 5.10.*Not affected
5.15.99 through 5.15.*Not affected
6.1.16 through 6.1.*Not affected
6.2.3 through 6.2.*Not affected
6.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.