CVE-2023-53480
Published: Oct 1, 2025
Modified: May 11, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: kobject: Add sanity check for kset->kobj.ktype in kset_register() When I register a kset in the following way: static struct kset my_kset; kobject_set_name(&my_kset.kobj, "my_kset"); ret = kset_register(&my_kset); A null pointer dereference exception is occurred: [ 4453.568337] Unable to handle kernel NULL pointer dereference at \ virtual address 0000000000000028 ... ... [ 4453.810361] Call trace: [ 4453.813062] kobject_get_ownership+0xc/0x34 [ 4453.817493] kobject_add_internal+0x98/0x274 [ 4453.822005] kset_register+0x5c/0xb4 [ 4453.825820] my_kobj_init+0x44/0x1000 [my_kset] ... ... Because I didn't initialize my_kset.kobj.ktype. According to the description in Documentation/core-api/kobject.rst: - A ktype is the type of object that embeds a kobject. Every structure that embeds a kobject needs a corresponding ktype. So add sanity check to make sure kset->kobj.ktype is not NULL.
| Vendor | Product | Versions |
|---|---|---|
Linux | Linux | affected 5f81880d5204ee2388fd9a75bb850ccd526885b7 - < 039ec9db2d30032eafa365f5f89b30eca5322b05affected 5f81880d5204ee2388fd9a75bb850ccd526885b7 - < 964e025ceefdf75da46b0133d0c2790de451aeecaffected 5f81880d5204ee2388fd9a75bb850ccd526885b7 - < 5df5829158513134ddcaf2184d9286eda7b0bb18affected 5f81880d5204ee2388fd9a75bb850ccd526885b7 - < f3f6bf22a4f5ba649cf26ae4670de5c7f861bdefaffected 5f81880d5204ee2388fd9a75bb850ccd526885b7 - < 48aebbe801e78a8932404c122ed0e880ccedc220+2 more versions |
Linux | Linux | affected 4.19unaffected 0 - < 4.19unaffected 4.19.295 - <= 4.19.*unaffected 5.4.257 - <= 5.4.*unaffected 5.10.197 - <= 5.10.*+4 more versions |
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now