CVE-2023-53681

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-53681
In the Linux kernel, the following vulnerability has been resolved: bcache: Fix __bch_btree_node_alloc to make the failure behavior consistent In some specific situations, the return value of __bch_btree_node_alloc may be NULL. This may lead to a potential NULL pointer dereference in caller function like a calling chain : btree_split->bch_btree_node_alloc->__bch_btree_node_alloc. Fix it by initializing the return value in __bch_btree_node_alloc.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/4514847aee18d9391a0cf3aad75d3567c72795a4 Patch
https://git.kernel.org/stable/c/587b4e8bb5dac682f09280ab35db4632b29d5ac4 Patch
https://git.kernel.org/stable/c/7ecea5ce3dc17339c280c75b58ac93d8c8620d9f Patch
https://git.kernel.org/stable/c/80fca8a10b604afad6c14213fdfd816c4eda3ee4 Patch
https://git.kernel.org/stable/c/a4405f6ee03323410d7b10966fd67b35f71b1944 Patch
https://git.kernel.org/stable/c/b070f29a61436f6f8a2e3abc7ea4f4be81695198 Patch
https://git.kernel.org/stable/c/f67b0e3081f2a24170280a33ac66f6b112083c03 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

28 Oct 2026, 20:10

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta: bcache: Corrección de __bch_btree_node_alloc para hacer que el comportamiento de fallo sea consistente En algunas situaciones específicas, el valor de retorno de __bch_btree_node_alloc puede ser NULL. Esto puede llevar a una potencial desreferencia de puntero NULL en la función llamadora, como una cadena de llamadas: btree_split -> bch_btree_node_alloc -> __bch_btree_node_alloc. Se corrige inicializando el valor de retorno en __bch_btree_node_alloc.
Information

Published : 2025-10-07 16:15

Updated : 2026-10-28 20:10

NVD link : CVE-2023-53681

Mitre link : CVE-2023-53681

CVE.ORG link : CVE-2023-53681

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference