Strix
26.1K

CVE-2023-53786

UnknownEPSS 0.19%

Last modified

CVE-2023-53786 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: dm flakey: fix a crash with invalid table line This command will crash with NULL pointer dereference: dmsetup create flakey --table \ "0 `blockdev --getsize /dev/ram0` flakey /dev/ram0 0 0 1 2 corrupt_bio_byte 512" Fix the crash by checking if arg_name is non-NULL before comparing it.. EPSS estimates a 0.19% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: dm flakey: fix a crash with invalid table line This command will crash with NULL pointer dereference: dmsetup create flakey --table \ "0 `blockdev --getsize /dev/ram0` flakey /dev/ram0 0 0 1 2 corrupt_bio_byte 512" Fix the crash by checking if arg_name is non-NULL before comparing it.

Metrics

EPSS Probability
0.19%

9.4th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= a3998799fb4df0b0af8271a7d50c4269032397aa, < f95cb1526669ccdf7eb12eefd57a893953e3595f; >= a3998799fb4df0b0af8271a7d50c4269032397aa, < 12849ed107c0b2869fb775c81208050899006f07; >= a3998799fb4df0b0af8271a7d50c4269032397aa, < 337b7af273562b73c46ef77a724604ad139ca762; >= a3998799fb4df0b0af8271a7d50c4269032397aa, < a1e3fffe02e05c05357af91364ac0fc1ed425b5b; >= a3998799fb4df0b0af8271a7d50c4269032397aa, < f76fcb9d43ec014ac4a1bb983768696d5b032df9; >= a3998799fb4df0b0af8271a7d50c4269032397aa, < cb874a190f3f7c3c3fa5b979bee7a3b8cc3a19cc; >= a3998799fb4df0b0af8271a7d50c4269032397aa, < 83b4e3d878ea6be9aec1d5a1ab177c766c64d1a0; >= a3998799fb4df0b0af8271a7d50c4269032397aa, < 8258d84a7917aeece773716518deadb7ad776cb7; >= a3998799fb4df0b0af8271a7d50c4269032397aa, < 98dba02d9a93eec11bffbb93c7c51624290702d2
LinuxLinux3.1

References

Timeline

Published
Last Modified
Status
Deferred

Frequently Asked Questions

What is CVE-2023-53786?
In the Linux kernel, the following vulnerability has been resolved: dm flakey: fix a crash with invalid table line This command will crash with NULL pointer dereference: dmsetup create flakey --table \ "0 `blockdev --getsize /dev/ram0` flakey /dev/ram0 0 0 1 2 corrupt_bio_byte 512" Fix the crash by checking if arg_name is non-NULL before comparing it.
How severe is CVE-2023-53786?
Severity scoring for CVE-2023-53786 is pending analysis. The EPSS model estimates a 0.19% probability of exploitation in the next 30 days.
How do I fix CVE-2023-53786?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2023

View all 2023CVEs →

Are you affected by CVE-2023-53786?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST