PT-2025-49646
CVE-2023-53786
·
Published
2023-04-19
·
Updated
2026-09-25
Description by
CVSS 2.0
6.0
MediumMetricsAV:L/AC:H/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A flaw exists in the Linux kernel related to device mapper (dm) flakey functionality. A specific command involving
dmsetup create flakey with a crafted table can cause a NULL pointer dereference, leading to a system crash. The command utilizes blockdev --getsize /dev/ram0 to determine block size and attempts to create a device with a potentially invalid configuration. The issue is triggered when comparing a potentially NULL value, specifically arg name, without a prior check.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾