In the Linux kernel, the following vulnerability has been resolved:

pwm: lpc32xx: Remove handling of PWM channels

Because LPC32xx PWM controllers have only a single output which is
registered as the only PWM device/channel per controller, it is known in
advance that pwm->hwpwm value is always 0. On basis of this fact
simplify the code by removing operations with pwm->hwpwm, there is no
controls which require channel number as input.

Even though I wasn't aware at the time when I forward ported that patch,
this fixes a null pointer dereference as lpc32xx->chip.pwms is NULL
before devm_pwmchip_add() is called.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00023.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
bb4de81eb940e7027f37a6fd3b7ddcb4403deb56 affected < abd9b2ee4047ccd980decbf26d61f9637604b1d5
4459118977665f681017e1299933895d54b6e87b affected < a9a505f5b39d8fff1a55963a5e524c84639e98b2
81e6b51709da162b94e40a445bb60856406beaa1 affected < 04301da4d87067a989f70ee56942bf9d97cd2a45
322b70b522abe03cd59712bb47a72eddd835d19d affected < a2d9d884e84bfd37892219b1f55847f36d8e9901
3d2813fb17e5fd0d73c1d1442ca0192bde4af10e affected < 5e22217c11424ef958ba28d03ff7167b4d7a8914
3d2813fb17e5fd0d73c1d1442ca0192bde4af10e affected < 523f6268e86552a048975749251184c4e9a4b38f
3d2813fb17e5fd0d73c1d1442ca0192bde4af10e affected < e3a0ddbaf7f1f9ffc070718b417461ced3268758
3d2813fb17e5fd0d73c1d1442ca0192bde4af10e affected < 4aae44f65827f0213a7361cf9c32cfe06114473f
7fc2172ad4e701d3c6e7dcb7b2efd8df71d2417b affected —
1c90a357cef4219cb436e59cc7463888103e104b affected —
Linux Linux affected
Version Status Constraints
5.15 affected —
0 unaffected < 5.15
4.14.326 unaffected ≤ 4.14.*
4.19.295 unaffected ≤ 4.19.*
5.4.257 unaffected ≤ 5.4.*
5.10.195 unaffected ≤ 5.10.*
5.15.132 unaffected ≤ 5.15.*
6.1.54 unaffected ≤ 6.1.*
6.5.4 unaffected ≤ 6.5.*
6.6 unaffected ≤ *

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Linux Subscribe
Linux Kernel Subscribe

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/04301da4d87067a989f70ee56942bf9d97cd2a45 cve-icon cve-icon
https://git.kernel.org/stable/c/4aae44f65827f0213a7361cf9c32cfe06114473f cve-icon cve-icon
https://git.kernel.org/stable/c/523f6268e86552a048975749251184c4e9a4b38f cve-icon cve-icon
https://git.kernel.org/stable/c/5e22217c11424ef958ba28d03ff7167b4d7a8914 cve-icon cve-icon
https://git.kernel.org/stable/c/a2d9d884e84bfd37892219b1f55847f36d8e9901 cve-icon cve-icon
https://git.kernel.org/stable/c/a9a505f5b39d8fff1a55963a5e524c84639e98b2 cve-icon cve-icon
https://git.kernel.org/stable/c/abd9b2ee4047ccd980decbf26d61f9637604b1d5 cve-icon cve-icon
https://git.kernel.org/stable/c/e3a0ddbaf7f1f9ffc070718b417461ced3268758 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025100110-CVE-2023-53472-93cb@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2023-53472 cve-icon
https://www.cve.org/CVERecord?id=CVE-2023-53472 cve-icon
History

Tue, 20 Jan 2026 17:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-476
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Thu, 02 Oct 2025 09:00:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Vendors & Products Linux
Linux linux Kernel

Thu, 02 Oct 2025 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Wed, 01 Oct 2025 12:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: pwm: lpc32xx: Remove handling of PWM channels Because LPC32xx PWM controllers have only a single output which is registered as the only PWM device/channel per controller, it is known in advance that pwm->hwpwm value is always 0. On basis of this fact simplify the code by removing operations with pwm->hwpwm, there is no controls which require channel number as input. Even though I wasn't aware at the time when I forward ported that patch, this fixes a null pointer dereference as lpc32xx->chip.pwms is NULL before devm_pwmchip_add() is called.
Title pwm: lpc32xx: Remove handling of PWM channels
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-10-01T11:42:41.951Z

Reserved: 2025-10-01T11:39:39.401Z

Link: CVE-2023-53472

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2025-10-01T12:15:49.420

Modified: 2026-01-20T17:03:13.247

Link: CVE-2023-53472

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-10-01T00:00:00Z

Links: CVE-2023-53472 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2025-10-02T08:39:43Z

Weaknesses