CVE-2023-53470
MEDIUMLinux Kernel - Use After Free
Title source: llmDescription
In the Linux kernel, the following vulnerability has been resolved: ionic: catch failure from devlink_alloc Add a check for NULL on the alloc return. If devlink_alloc() fails and we try to use devlink_priv() on the NULL return, the kernel gets very unhappy and panics. With this fix, the driver load will still fail, but at least it won't panic the kernel.
References (5)
Scores
CVSS v3
5.5
EPSS
0.0001
EPSS Percentile
2.8%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Classification
CWE
CWE-476
Status
published
Affected Products (1)
linux/linux_kernel
< 5.15.112
Timeline
Published
Oct 01, 2025
Tracked Since
Feb 18, 2026