CVE-2023-53310

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the fuel gauge external power changed() function within the axp288 fuel gauge driver. This occurs because the function dereferences info->bat before it is guaranteed to be set by devm power supply register(). Specifically, the external power changed callback can be invoked before info->bat is initialized, leading to a NULL pointer dereference. The issue is resolved by utilizing the psy argument passed to fuel gauge external power changed(), which is always valid.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.