Null Pointer Dereference in Linux Kernel Affects Multiple Distributions

CVE-2023-53664

What is CVE-2023-53664?

A vulnerability in the Linux kernel exposes systems to the risk of null pointer dereference, particularly within the dev_pm_opp_get_required_pstate() function. This flaw occurs when the 'opp' pointer is dereferenced without a prior check for NULL or error status, potentially leading to system instability or crashes. Addressing this vulnerability involves correcting the dereference logic by directly accessing the opp_table to enhance overall system security.

References