Null Pointer Dereference Vulnerability in Linux Kernel Affects Multiple Versions

CVE-2023-53332

What is CVE-2023-53332?

A vulnerability exists in the Linux kernel related to the handling of interrupt requests, specifically where a NULL pointer can inadvertently be dereferenced if an invalid interrupt number is passed. This issue arises during the execution of ipi_send_{mask|single}() functions when local variables are not properly validated, leading to a kernel oops in the irq_data_get_affinity_mask() function. A missing NULL pointer check in ipi_send_verify() exacerbates the issue, allowing for potential disruption in system operations. A patch addressing this vulnerability has been introduced to enhance system reliability and security.

References