CVE-2023-53470

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw where a failure from devlink alloc() was not properly handled. Specifically, a check for a NULL return value from the devlink alloc() function was missing. If devlink alloc() failed and the code attempted to use devlink priv() on the resulting NULL pointer, the kernel would panic. The fix adds a check for NULL on the allocation return, preventing the kernel panic and causing the driver load to fail instead.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.