PT-2025-38050

CVE-2023-53332

·

Published

2023-01-01

·

Updated

2026-10-21

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A flaw exists in the Linux kernel related to inter-processor interrupts (IPIs). Specifically, a NULL pointer dereference can occur in the irq data get affinity mask() function when ipi send {mask|single}() is called with an invalid interrupt number. This can lead to a kernel oops as the NULL pointer is dereferenced during verification in the ipi send verify() function. The issue was discovered by the Linux Verification Center using the SVACE static analysis tool.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
AZL-71888
CLSA-2026-1783791447
OESA-2025-2348
OESA-2025-2349
SUSE-SU-2025:03614-1
SUSE-SU-2025:03615-1
SUSE-SU-2025:3761-1
Found an issue in the description? Have something to add? Feel free to write us 👾