CVE-2023-53332

genirq/ipi: Fix NULL pointer deref in irq_data_get_affinity_mask()

Medium · published September 16, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
3.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

genirq/ipi: Fix NULL pointer deref in irq_data_get_affinity_mask()

If ipi_send_{mask|single}() is called with an invalid interrupt number, all

the local variables there will be NULL. ipi_send_verify() which is invoked

from these functions does verify its 'data' parameter, resulting in a

kernel oops in irq_data_get_affinity_mask() as the passed NULL pointer gets

dereferenced.

Add a missing NULL pointer check in ipi_send_verify()...

Found by Linux Verification Center (linuxtesting.org) with the SVACE static

analysis tool.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00146 · 3.6th percentile
Published
2025-09-16T16:12Z
EPSS history
Timeline
  • 16 SEP 16:12Z
    genirq/ipi: Fix NULL pointer deref in irq_data_get_affinity_mask()
    cvelistv5