CVE-2023-53987

ping: Fix potentail NULL deref for /proc/net/icmp.

published December 24, 2025

CVSS
—
EPSS
0%
Percentile
9.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ping: Fix potentail NULL deref for /proc/net/icmp.

After commit dbca1596bbb0 ("ping: convert to RCU lookups, get rid

of rwlock"), we use RCU for ping sockets, but we should use spinlock

for /proc/net/icmp to avoid a potential NULL deref mentioned in

the previous patch.

Let's go back to using spinlock there.

Note we can convert ping sockets to use hlist instead of hlist_nulls

because we do not use SLAB_TYPESAFE_BY_RCU for ping sockets.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00198 · 9.1th percentile
Published
2025-12-24T10:55Z
EPSS history
Timeline
  • 24 DEC 10:55Z
    ping: Fix potentail NULL deref for /proc/net/icmp.
    cvelistv5