PT-2025-49646

CVE-2023-53786

·

Published

2023-04-19

·

Updated

2026-09-25

Description by

CVSS 2.0
6.0
Medium
MetricsAV:L/AC:H/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A flaw exists in the Linux kernel related to device mapper (dm) flakey functionality. A specific command involving dmsetup create flakey with a crafted table can cause a NULL pointer dereference, leading to a system crash. The command utilizes blockdev --getsize /dev/ram0 to determine block size and attempts to create a device with a potentially invalid configuration. The issue is triggered when comparing a potentially NULL value, specifically arg name, without a prior check.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
RHSA-2023:6583
RHSA-2023:7077
SUSE-SU-2026:0263-1
SUSE-SU-2026:0316-1
SUSE-SU-2026:0317-1
SUSE-SU-2026:0411-1
SUSE-SU-2026:0617-1
Found an issue in the description? Have something to add? Feel free to write us 👾