CVE-2023-53480

kobject: Add sanity check for kset->kobj.ktype in kset_register()

State: Published
Severity: Not scored
Published: Oct 1, 2025
Updated: May 11, 2026
Reserved: Oct 1, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

kobject: Add sanity check for kset->kobj.ktype in kset_register()

When I register a kset in the following way: static struct kset my_kset; kobject_set_name(&my_kset.kobj, "my_kset"); ret = kset_register(&my_kset);

A null pointer dereference exception is occurred: [ 4453.568337] Unable to handle kernel NULL pointer dereference at \ virtual address 0000000000000028 ... ... [ 4453.810361] Call trace: [ 4453.813062] kobject_get_ownership+0xc/0x34 [ 4453.817493] kobject_add_internal+0x98/0x274 [ 4453.822005] kset_register+0x5c/0xb4 [ 4453.825820] my_kobj_init+0x44/0x1000 [my_kset] ... ...

Because I didn't initialize my_kset.kobj.ktype.

According to the description in Documentation/core-api/kobject.rst: - A ktype is the type of object that embeds a kobject. Every structure that embeds a kobject needs a corresponding ktype.

So add sanity check to make sure kset->kobj.ktype is not NULL.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	5f81880d5204ee2388fd9a75bb850ccd526885b7 to before 039ec9db2d30032eafa365f5f89b30eca5322b05Affected 5f81880d5204ee2388fd9a75bb850ccd526885b7 to before 964e025ceefdf75da46b0133d0c2790de451aeecAffected 5f81880d5204ee2388fd9a75bb850ccd526885b7 to before 5df5829158513134ddcaf2184d9286eda7b0bb18Affected 5f81880d5204ee2388fd9a75bb850ccd526885b7 to before f3f6bf22a4f5ba649cf26ae4670de5c7f861bdefAffected 5f81880d5204ee2388fd9a75bb850ccd526885b7 to before 48aebbe801e78a8932404c122ed0e880ccedc220Affected 5f81880d5204ee2388fd9a75bb850ccd526885b7 to before 1a772881bc059c596d8ca587cbd2a233edce3d3bAffected 5f81880d5204ee2388fd9a75bb850ccd526885b7 to before 4d0fe8c52bb3029d83e323c961221156ab98680bAffected
LinuxLinux	4.19Affected before 4.19Not affected 4.19.295 through 4.19.Not affected 5.4.257 through 5.4.Not affected 5.10.197 through 5.10.Not affected 5.15.133 through 5.15.Not affected 6.1.55 through 6.1.Not affected 6.5.5 through 6.5.Not affected 6.6 and laterNot affected

Product

Versions

LinuxLinux

5f81880d5204ee2388fd9a75bb850ccd526885b7 to before 039ec9db2d30032eafa365f5f89b30eca5322b05Affected
5f81880d5204ee2388fd9a75bb850ccd526885b7 to before 964e025ceefdf75da46b0133d0c2790de451aeecAffected
5f81880d5204ee2388fd9a75bb850ccd526885b7 to before 5df5829158513134ddcaf2184d9286eda7b0bb18Affected
5f81880d5204ee2388fd9a75bb850ccd526885b7 to before f3f6bf22a4f5ba649cf26ae4670de5c7f861bdefAffected
5f81880d5204ee2388fd9a75bb850ccd526885b7 to before 48aebbe801e78a8932404c122ed0e880ccedc220Affected
5f81880d5204ee2388fd9a75bb850ccd526885b7 to before 1a772881bc059c596d8ca587cbd2a233edce3d3bAffected
5f81880d5204ee2388fd9a75bb850ccd526885b7 to before 4d0fe8c52bb3029d83e323c961221156ab98680bAffected

LinuxLinux

4.19Affected
before 4.19Not affected
4.19.295 through 4.19.*Not affected
5.4.257 through 5.4.*Not affected
5.10.197 through 5.10.*Not affected
5.15.133 through 5.15.*Not affected
6.1.55 through 6.1.*Not affected
6.5.5 through 6.5.*Not affected
6.6 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.