CVE-2023-53005: trace_events_hist: add check for return value of 'create_hist_field'
First published: Thu Mar 27 2025(Updated: )
In the Linux kernel, the following vulnerability has been resolved: trace_events_hist: add check for return value of 'create_hist_field' Function 'create_hist_field' is called recursively at trace_events_hist.c:1954 and can return NULL-value that's why we have to check it to avoid null pointer dereference. Found by Linux Verification Center (linuxtesting.org) with SVACE.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux Kernel |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://git.kernel.org/stable/c/d2d1ada58e7cc100b8d7d6b082d19321ba4a700a
- https://git.kernel.org/stable/c/31b2414abeaa6de0490e85164badc6dcb1bb8ec9
- https://git.kernel.org/stable/c/886aa449235f478e262bbd5dcdee6ed6bc202949
- https://git.kernel.org/stable/c/592ba7116fa620425725ff0972691f352ba3caf6
- https://git.kernel.org/stable/c/b4e7e81b4fdfcf457daee6b7a61769f62198d840
- https://git.kernel.org/stable/c/8b152e9150d07a885f95e1fd401fc81af202d9a4
Frequently Asked Questions
What is the severity of CVE-2023-53005?
CVE-2023-53005 is categorized as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2023-53005?
To fix CVE-2023-53005, you should update to the latest patched version of the Linux kernel.
What impact does CVE-2023-53005 have on system security?
CVE-2023-53005 could potentially lead to denial of service through a NULL pointer dereference in trace event handling.
Which versions of the Linux kernel are affected by CVE-2023-53005?
The specific versions affected by CVE-2023-53005 are not listed, but updating to the latest stable release is recommended.
Is CVE-2023-53005 exploitable remotely?
CVE-2023-53005 does not appear to be remotely exploitable as it requires local access to the system.
- collector/mitre-cve
- source/MITRE
- collector/nvd-api
- source/NVD
- agent/weakness
- agent/type
- agent/description
- agent/first-publish-date
- agent/title
- agent/last-modified-date
- agent/references
- agent/author
- agent/source
- agent/event
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- vendor/linux
- canonical/linux kernel