CVE-2023-52993

In the Linux kernel, the following vulnerability has been resolved: x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL Baoquan reported that after triggering a crash the subsequent crash-kernel fails to boot about half of the time. It triggers a NULL pointer dereference in the periodic tick code. This happens because the legacy timer interrupt (IRQ0) is resent in software which happens in soft interrupt (tasklet) context. In this context get_irq_regs() returns NULL which leads to the NULL pointer dereference. The reason for the resend is a spurious APIC interrupt on the IRQ0 vector which is captured and leads to a resend when the legacy timer interrupt is enabled. This is wrong because the legacy PIC interrupts are level triggered and therefore should never be resent in software, but nothing ever sets the IRQ_LEVEL flag on those interrupts, so the core code does not know about their trigger type. Ensure that IRQ_LEVEL is set when the legacy PCI interrupts are set up.

• CWE-476
• CWE-476

• https://git.kernel.org/stable/c/0b08201158f177aab469e356b4d6af24fdd118dfPatch
• https://git.kernel.org/stable/c/137f1b47da5f58805da42c1b7811e28c1e353f39Patch
• https://git.kernel.org/stable/c/496975d1a2937f4baadf3d985991b13fc4fc4f27Patch
• https://git.kernel.org/stable/c/5fa55950729d0762a787451dc52862c3f850f859Patch
• https://git.kernel.org/stable/c/744fe9be9665227335539b7a77ece8d9ff62b6c0Patch
• https://git.kernel.org/stable/c/8770cd9d7c14aa99c255a0d08186f0be953e1638Patch
• https://git.kernel.org/stable/c/e284c273dbb4c1ed68d4204bff94d0b10e4a90f5Patch

Published

Mar 27, 2025

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-52988In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2023-52989In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-5299A user with a standard account in Fuji Electric Tellus Lite …8.8
• CVE-2023-52990Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2023-52991In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-52992In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-52994In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-52995In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-52996In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-52997In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-52998In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-52999In the Linux kernel, the following vulnerability has been re…7.8