CVE-2023-52984

MEDIUM EPSS 15.8%
Published Mar 27, 20251y ago · Modified Jun 17, 20262w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Mar 27, 2025 1y ago
Last Modified Jun 17, 2026 2w ago

Description

In the Linux kernel, the following vulnerability has been resolved: net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices The probe() function is only used for the DP83822 PHY, leaving the private data pointer uninitialized for the smaller DP83825/26 models. While all uses of the private data structure are hidden in 82822 specific callbacks, configuring the interrupt is shared across all models. This causes a NULL pointer dereference on the smaller PHYs as it accesses the private data unchecked. Verifying the pointer avoids that.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
15.8% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-476 NULL Pointer Dereference Memory Safety

Affected Products 9

VendorProductVersionRange
linuxlinux_kernel*≥5.10  –  <5.10.168
linuxlinux_kernel*≥5.11  –  <5.15.93
linuxlinux_kernel*≥5.16  –  <6.1.11
linuxlinux_kernel6.2any
linuxlinux_kernel6.2any
linuxlinux_kernel6.2any
linuxlinux_kernel6.2any
linuxlinux_kernel6.2any
linuxlinux_kernel6.2any

References 4

  • git.kernel.org https://git.kernel.org/stable/c/2cd1e9c013ec56421c58921b1ddf1d2d53bd47fa
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/362a2f5531dc0e5b0b5b3e3a541000dbffa75461
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/422ae7d9c7221e8d4c8526d0f54106307d69d2dc
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/78901b10522cdf6badf24acf65a892637596bccc
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/2cd1e9c013ec56421c58921b1ddf1d2d53bd47fa
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/362a2f5531dc0e5b0b5b3e3a541000dbffa75461
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/422ae7d9c7221e8d4c8526d0f54106307d69d2dc
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/78901b10522cdf6badf24acf65a892637596bccc
    Patch