CVE-2023-53480

kobject: Add sanity check for kset->kobj.ktype in kset_register()

MEDIUM

5.5

CVSS Score

Published: October 1, 2025 at 11:42 AM UTC

Updated: June 17, 2026 at 06:45 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: kobject: Add sanity check for kset->kobj.ktype in kset_register() When I register a kset in the following way: static struct kset my_kset; kobject_set_name(&my_kset.kobj, "my_kset"); ret = kset_register(&my_kset); A null pointer dereference exception is occurred: [ 4453.568337] Unable to handle kernel NULL pointer dereference at \ virtual address 0000000000000028 ... ... [ 4453.810361] Call trace: [ 4453.813062] kobject_get_ownership+0xc/0x34 [ 4453.817493] kobject_add_internal+0x98/0x274 [ 4453.822005] kset_register+0x5c/0xb4 [ 4453.825820] my_kobj_init+0x44/0x1000 [my_kset] ... ... Because I didn't initialize my_kset.kobj.ktype. According to the description in Documentation/core-api/kobject.rst: - A ktype is the type of object that embeds a kobject. Every structure that embeds a kobject needs a corresponding ktype. So add sanity check to make sure kset->kobj.ktype is not NULL.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

4.19 ≤ v < 4.19.2954.19 ≤ v < 5.10.1974.19 ≤ v < 5.15.1334.19 ≤ v < 5.4.2574.19 ≤ v < 6.1.554.19 ≤ v < 6.5.54.19 ≤ v < 6.64.20 ≤ v < 5.4.2575.11 ≤ v < 5.15.1335.16 ≤ v < 6.1.555.5 ≤ v < 5.10.1976.2 ≤ v < 6.5.54.195f81880d5204ee2388fd9a75bb850ccd526885b7

Vendor states this is fixed in 039ec9db2d30032eafa365f5f89b30eca5322b05 (fixed)

Vendor states this is fixed in 1a772881bc059c596d8ca587cbd2a233edce3d3b (fixed)

Vendor states this is fixed in 48aebbe801e78a8932404c122ed0e880ccedc220 (fixed)

Vendor states this is fixed in 4d0fe8c52bb3029d83e323c961221156ab98680b (fixed)

Vendor states this is fixed in 5df5829158513134ddcaf2184d9286eda7b0bb18 (fixed)

Vendor states this is fixed in 964e025ceefdf75da46b0133d0c2790de451aeec (fixed)

Vendor states this is fixed in f3f6bf22a4f5ba649cf26ae4670de5c7f861bdef (fixed)

Vendor states this is fixed in 4.19 (unaffected)

Vendor states this is fixed in 4.19.295 (unaffected)

Vendor states this is fixed in 5.10.197 (unaffected)

Vendor states this is fixed in 5.15.133 (unaffected)

Vendor states this is fixed in 5.4.257 (unaffected)