CVE-2023-53472

MEDIUM

Linux kernel 4.9.284-4.10 - NULL Pointer Dereference in PWM Controller Channel Handling

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: pwm: lpc32xx: Remove handling of PWM channels Because LPC32xx PWM controllers have only a single output which is registered as the only PWM device/channel per controller, it is known in advance that pwm->hwpwm value is always 0. On basis of this fact simplify the code by removing operations with pwm->hwpwm, there is no controls which require channel number as input. Even though I wasn't aware at the time when I forward ported that patch, this fixes a null pointer dereference as lpc32xx->chip.pwms is NULL before devm_pwmchip_add() is called.

Scores

CVSS v3 5.5
EPSS 0.0014
EPSS Percentile 3.9%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-476
Status published
Products (27)
Linux/Linux < 5.15
Linux/Linux 1c90a357cef4219cb436e59cc7463888103e104b
Linux/Linux 322b70b522abe03cd59712bb47a72eddd835d19d - a2d9d884e84bfd37892219b1f55847f36d8e9901
Linux/Linux 3d2813fb17e5fd0d73c1d1442ca0192bde4af10e - 4aae44f65827f0213a7361cf9c32cfe06114473f
Linux/Linux 3d2813fb17e5fd0d73c1d1442ca0192bde4af10e - 523f6268e86552a048975749251184c4e9a4b38f
Linux/Linux 3d2813fb17e5fd0d73c1d1442ca0192bde4af10e - 5e22217c11424ef958ba28d03ff7167b4d7a8914
Linux/Linux 3d2813fb17e5fd0d73c1d1442ca0192bde4af10e - e3a0ddbaf7f1f9ffc070718b417461ced3268758
Linux/Linux 4.14.248 - 4.14.326
Linux/Linux 4.14.326 - 4.14.*
Linux/Linux 4.19.208 - 4.19.295
... and 17 more
Published Oct 01, 2025
Tracked Since Feb 18, 2026