OpenCVE

In the Linux kernel, the following vulnerability has been resolved: hwmon: (axi-fan-control) Fix possible NULL pointer dereference axi_fan_control_irq_handler(), dependent on the private axi_fan_control_data structure, might be called before the hwmon device is registered. That will cause an "Unable to handle kernel NULL pointer dereference" error.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/2a5b3370a1d9750eca325292e291c8c7cb8cf2e0
https://git.kernel.org/stable/c/33de53a2706066d526173dc743faf43d92c62105
https://git.kernel.org/stable/c/7d870088db4863c514a7f8751cd593751983029a
https://git.kernel.org/stable/c/b3e7eb23a6e97642ff3190431c06475d9ca1e062
https://git.kernel.org/stable/c/c49f14cc1bb12c625a1c572e8a95b6adefd4d8eb
https://git.kernel.org/stable/c/f62b8969847850ba7596cb145cc47c65ea57dae0
https://lore.kernel.org/linux-cve-announce/2024052118-CVE-2023-52863-490d@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2023-52863
https://www.cve.org/CVERecord?id=CVE-2023-52863

History

No history.

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-05-21T15:31:55.198Z

Updated: 2024-11-04T14:54:06.801Z

Reserved: 2024-05-21T15:19:24.261Z

Link: CVE-2023-52863

Vulnrichment

Updated: 2024-08-02T23:11:36.245Z

NVD

Status : Awaiting Analysis

Published: 2024-05-21T16:15:23.233

Modified: 2024-11-21T08:40:44.977

Link: CVE-2023-52863

Redhat

Severity : Low

Publid Date: 2024-05-21T00:00:00Z

Links: CVE-2023-52863 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-52863", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-05-21T15:19:24.261Z", "datePublished": "2024-05-21T15:31:55.198Z", "dateUpdated": "2024-11-04T14:54:06.801Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-11-04T14:54:06.801Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nhwmon: (axi-fan-control) Fix possible NULL pointer dereference\n\naxi_fan_control_irq_handler(), dependent on the private\naxi_fan_control_data structure, might be called before the hwmon\ndevice is registered. That will cause an \"Unable to handle kernel\nNULL pointer dereference\" error."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/hwmon/axi-fan-control.c"], "versions": [{"version": "8412b410fa5e", "lessThan": "7d870088db48", "status": "affected", "versionType": "git"}, {"version": "8412b410fa5e", "lessThan": "b3e7eb23a6e9", "status": "affected", "versionType": "git"}, {"version": "8412b410fa5e", "lessThan": "33de53a27060", "status": "affected", "versionType": "git"}, {"version": "8412b410fa5e", "lessThan": "f62b89698478", "status": "affected", "versionType": "git"}, {"version": "8412b410fa5e", "lessThan": "c49f14cc1bb1", "status": "affected", "versionType": "git"}, {"version": "8412b410fa5e", "lessThan": "2a5b3370a1d9", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/hwmon/axi-fan-control.c"], "versions": [{"version": "5.7", "status": "affected"}, {"version": "0", "lessThan": "5.7", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.201", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.139", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.63", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.5.12", "lessThanOrEqual": "6.5.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.2", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.7", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/7d870088db4863c514a7f8751cd593751983029a"}, {"url": "https://git.kernel.org/stable/c/b3e7eb23a6e97642ff3190431c06475d9ca1e062"}, {"url": "https://git.kernel.org/stable/c/33de53a2706066d526173dc743faf43d92c62105"}, {"url": "https://git.kernel.org/stable/c/f62b8969847850ba7596cb145cc47c65ea57dae0"}, {"url": "https://git.kernel.org/stable/c/c49f14cc1bb12c625a1c572e8a95b6adefd4d8eb"}, {"url": "https://git.kernel.org/stable/c/2a5b3370a1d9750eca325292e291c8c7cb8cf2e0"}], "title": "hwmon: (axi-fan-control) Fix possible NULL pointer dereference", "x_generator": {"engine": "bippy-9e1c9544281a"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-52863", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-05-21T17:54:12.271284Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T17:23:25.382Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T23:11:36.245Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/7d870088db4863c514a7f8751cd593751983029a", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/b3e7eb23a6e97642ff3190431c06475d9ca1e062", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/33de53a2706066d526173dc743faf43d92c62105", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/f62b8969847850ba7596cb145cc47c65ea57dae0", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/c49f14cc1bb12c625a1c572e8a95b6adefd4d8eb", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/2a5b3370a1d9750eca325292e291c8c7cb8cf2e0", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/7d870088db4863c514a7f8751cd593751983029a", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/b3e7eb23a6e97642ff3190431c06475d9ca1e062", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/33de53a2706066d526173dc743faf43d92c62105", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/f62b8969847850ba7596cb145cc47c65ea57dae0", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/c49f14cc1bb12c625a1c572e8a95b6adefd4d8eb", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/2a5b3370a1d9750eca325292e291c8c7cb8cf2e0", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T23:11:36.245Z"}}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-52863", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-05-21T17:54:12.271284Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-23T19:01:25.352Z"}, "title": "CISA ADP Vulnrichment"}], "cna": {"title": "hwmon: (axi-fan-control) Fix possible NULL pointer dereference", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "8412b410fa5e", "lessThan": "7d870088db48", "versionType": "git"}, {"status": "affected", "version": "8412b410fa5e", "lessThan": "b3e7eb23a6e9", "versionType": "git"}, {"status": "affected", "version": "8412b410fa5e", "lessThan": "33de53a27060", "versionType": "git"}, {"status": "affected", "version": "8412b410fa5e", "lessThan": "f62b89698478", "versionType": "git"}, {"status": "affected", "version": "8412b410fa5e", "lessThan": "c49f14cc1bb1", "versionType": "git"}, {"status": "affected", "version": "8412b410fa5e", "lessThan": "2a5b3370a1d9", "versionType": "git"}], "programFiles": ["drivers/hwmon/axi-fan-control.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "5.7"}, {"status": "unaffected", "version": "0", "lessThan": "5.7", "versionType": "custom"}, {"status": "unaffected", "version": "5.10.201", "versionType": "custom", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.139", "versionType": "custom", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.63", "versionType": "custom", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.5.12", "versionType": "custom", "lessThanOrEqual": "6.5.*"}, {"status": "unaffected", "version": "6.6.2", "versionType": "custom", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.7", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/hwmon/axi-fan-control.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/7d870088db4863c514a7f8751cd593751983029a"}, {"url": "https://git.kernel.org/stable/c/b3e7eb23a6e97642ff3190431c06475d9ca1e062"}, {"url": "https://git.kernel.org/stable/c/33de53a2706066d526173dc743faf43d92c62105"}, {"url": "https://git.kernel.org/stable/c/f62b8969847850ba7596cb145cc47c65ea57dae0"}, {"url": "https://git.kernel.org/stable/c/c49f14cc1bb12c625a1c572e8a95b6adefd4d8eb"}, {"url": "https://git.kernel.org/stable/c/2a5b3370a1d9750eca325292e291c8c7cb8cf2e0"}], "x_generator": {"engine": "bippy-a5840b7849dd"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nhwmon: (axi-fan-control) Fix possible NULL pointer dereference\n\naxi_fan_control_irq_handler(), dependent on the private\naxi_fan_control_data structure, might be called before the hwmon\ndevice is registered. That will cause an \"Unable to handle kernel\nNULL pointer dereference\" error."}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-05-29T05:18:39.437Z"}}}, "cveMetadata": {"cveId": "CVE-2023-52863", "state": "PUBLISHED", "dateUpdated": "2024-08-02T23:11:36.245Z", "dateReserved": "2024-05-21T15:19:24.261Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-05-21T15:31:55.198Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}

{"descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nhwmon: (axi-fan-control) Fix possible NULL pointer dereference\n\naxi_fan_control_irq_handler(), dependent on the private\naxi_fan_control_data structure, might be called before the hwmon\ndevice is registered. That will cause an \"Unable to handle kernel\nNULL pointer dereference\" error."}, {"lang": "es", "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: hwmon: (axi-fan-control) Se corrigi\u00f3 la posible desreferencia del puntero NULL. Se podr\u00eda llamar a axi_fan_control_irq_handler(), dependiente de la estructura privada axi_fan_control_data, antes de que se registre el dispositivo hwmon. Esto provocar\u00e1 el error \"No se puede manejar la desreferencia del puntero NULL del kernel\"."}], "id": "CVE-2023-52863", "lastModified": "2024-11-21T08:40:44.977", "metrics": {}, "published": "2024-05-21T16:15:23.233", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/2a5b3370a1d9750eca325292e291c8c7cb8cf2e0"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/33de53a2706066d526173dc743faf43d92c62105"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/7d870088db4863c514a7f8751cd593751983029a"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/b3e7eb23a6e97642ff3190431c06475d9ca1e062"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/c49f14cc1bb12c625a1c572e8a95b6adefd4d8eb"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/f62b8969847850ba7596cb145cc47c65ea57dae0"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://git.kernel.org/stable/c/2a5b3370a1d9750eca325292e291c8c7cb8cf2e0"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://git.kernel.org/stable/c/33de53a2706066d526173dc743faf43d92c62105"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://git.kernel.org/stable/c/7d870088db4863c514a7f8751cd593751983029a"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://git.kernel.org/stable/c/b3e7eb23a6e97642ff3190431c06475d9ca1e062"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://git.kernel.org/stable/c/c49f14cc1bb12c625a1c572e8a95b6adefd4d8eb"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://git.kernel.org/stable/c/f62b8969847850ba7596cb145cc47c65ea57dae0"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Awaiting Analysis"}