CVE-2023-52863

hwmon: (axi-fan-control) Fix possible NULL pointer dereference

MEDIUM

5.5

CVSS Score

Published: May 21, 2024 at 03:31 PM UTC

Updated: June 17, 2026 at 06:43 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.2%

SSVC

No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: hwmon: (axi-fan-control) Fix possible NULL pointer dereference axi_fan_control_irq_handler(), dependent on the private axi_fan_control_data structure, might be called before the hwmon device is registered. That will cause an "Unable to handle kernel NULL pointer dereference" error.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

5.11 ≤ v < 5.15.1395.16 ≤ v < 6.1.635.7 ≤ v < 5.10.2015.7 ≤ v < 5.15.1395.7 ≤ v < 6.1.635.7 ≤ v < 6.5.125.7 ≤ v < 6.6.25.7 ≤ v < 6.76.2 ≤ v < 6.5.126.6 ≤ v < 6.6.25.78412b410fa5e1e494a0fec84c3c462d49870d3f5

Vendor states this is fixed in 2a5b3370a1d9750eca325292e291c8c7cb8cf2e0 (fixed)

Vendor states this is fixed in 33de53a2706066d526173dc743faf43d92c62105 (fixed)

Vendor states this is fixed in 7d870088db4863c514a7f8751cd593751983029a (fixed)

Vendor states this is fixed in b3e7eb23a6e97642ff3190431c06475d9ca1e062 (fixed)

Vendor states this is fixed in c49f14cc1bb12c625a1c572e8a95b6adefd4d8eb (fixed)

Vendor states this is fixed in f62b8969847850ba7596cb145cc47c65ea57dae0 (fixed)

Vendor states this is fixed in 5.10.201 (unaffected)

Vendor states this is fixed in 5.15.139 (unaffected)

Vendor states this is fixed in 5.7 (unaffected)

Vendor states this is fixed in 6.1.63 (unaffected)

Vendor states this is fixed in 6.5.12 (unaffected)

Vendor states this is fixed in 6.6.2 (unaffected)