Riskcovery

CVE-2023-53332

genirq/ipi: Fix NULL pointer deref in irq_data_get_affinity_mask()

State
Published
Severity
5.5 Medium
Published
Sep 16, 2025
Updated
May 11, 2026
Reserved
Sep 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

genirq/ipi: Fix NULL pointer deref in irq_data_get_affinity_mask()

If ipi_send_{mask|single}() is called with an invalid interrupt number, all the local variables there will be NULL. ipi_send_verify() which is invoked from these functions does verify its 'data' parameter, resulting in a kernel oops in irq_data_get_affinity_mask() as the passed NULL pointer gets dereferenced.

Add a missing NULL pointer check in ipi_send_verify()...

Found by Linux Verification Center (linuxtesting.org) with the SVACE static analysis tool.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

Affected Products

ProductVersions
LinuxLinux
  • 3b8e29a82dd16c1f2061e0b955a71cd36eeb061b to before 926aef60ea64cd9becf2829f7388f48dbe8bcb11Affected
  • 3b8e29a82dd16c1f2061e0b955a71cd36eeb061b to before 7448c73d64075051f50caed2c62f46553b69ab8aAffected
  • 3b8e29a82dd16c1f2061e0b955a71cd36eeb061b to before feabecaff5902f896531dde90646ca5dfa9d4f7dAffected
LinuxLinux
  • 4.6Affected
  • before 4.6Not affected
  • 6.1.18 through 6.1.*Not affected
  • 6.2.5 through 6.2.*Not affected
  • 6.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.