CVE-2023-53335CWE-476

CVE-2023-53335

High · published September 17, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
41.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

RDMA/cxgb4: Fix potential null-ptr-deref in pass_establish()

If get_ep_from_tid() fails to lookup non-NULL value for ep, ep is

dereferenced later regardless of whether it is empty.

This patch adds a simple sanity check to fix the issue.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00489 · 41.2th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2025-09-17T19:15Z
Affected products (3)
ProductVersionsFixed in
linux/linux_kernel≥ 4.7, < 5.15.995.15.99
linux/linux_kernel≥ 5.16, < 6.1.166.1.16
linux/linux_kernel≥ 6.2, < 6.2.36.2.3
References (4)
https://git.kernel.org/stable/c/283861a4c52c1ea4df3dd1b6fc75a50796ce3524 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/2cfc00e974d75a3aa8155f2660f57d342e1f67ca · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/9dca64042d855a24b0bd81ce242e5dc7e939f6eb · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/9ddc77eefb2a567b705c3c86ab2ddabe43cadf1b · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 17 SEP 14:56Z
    RDMA/cxgb4: Fix potential null-ptr-deref in pass_establish()
    cvelistv5