01 Record

CVE-2023-53044

dm stats: check for and propagate alloc_percpu failure

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

dm stats: check for and propagate alloc_percpu failure

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.20% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 10.1% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Analyzed. NVD last modified this record on 2026-06-17.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-05-02 15:55Z1 YR AGO

Last updated

2026-05-11 19:37Z5 MO AGO

Reserved

2025-04-16

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-476NULL Pointer DereferenceBase

Data version

5.2

Document digest

ab304b9771595f0a400685accac998fe8cbb92dd743a64a4a47089b2fb60b42b

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxfd2ed4d252701d3bbed4cd3e3d267ad469bb832a to < 2287d7b721471a3d58bcd829250336e3cdf1635e, fd2ed4d252701d3bbed4cd3e3d267ad469bb832a to < 0d96bd507ed7e7d565b6d53ebd3874686f123b2e, fd2ed4d252701d3bbed4cd3e3d267ad469bb832a to < 4a32a9a818a895671bd43e0c40351e60e4e9140b, fd2ed4d252701d3bbed4cd3e3d267ad469bb832a to < c68f08cc745675a17894e1b4a5b5b9700ace6da4, fd2ed4d252701d3bbed4cd3e3d267ad469bb832a to < 443c9d522397511a4328dc2ec3c9c63c73049756, fd2ed4d252701d3bbed4cd3e3d267ad469bb832a to < a42180dd361584816bfe15c137b665699b994d90, fd2ed4d252701d3bbed4cd3e3d267ad469bb832a to < 5b66e36a3efd24041b7374432bfa4dec2ff01e95, fd2ed4d252701d3bbed4cd3e3d267ad469bb832a to < d3aa3e060c4a80827eb801fc448debc9daa7c46b, 3.12—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/2287d7b721471a3d58bcd829250336e3cdf1635e
git.kernel.orghttps://git.kernel.org/stable/c/0d96bd507ed7e7d565b6d53ebd3874686f123b2e
git.kernel.orghttps://git.kernel.org/stable/c/4a32a9a818a895671bd43e0c40351e60e4e9140b
git.kernel.orghttps://git.kernel.org/stable/c/c68f08cc745675a17894e1b4a5b5b9700ace6da4
git.kernel.orghttps://git.kernel.org/stable/c/443c9d522397511a4328dc2ec3c9c63c73049756
git.kernel.orghttps://git.kernel.org/stable/c/a42180dd361584816bfe15c137b665699b994d90
git.kernel.orghttps://git.kernel.org/stable/c/5b66e36a3efd24041b7374432bfa4dec2ff01e95
git.kernel.orghttps://git.kernel.org/stable/c/d3aa3e060c4a80827eb801fc448debc9daa7c46b

07 Fixed in

Debian 12

linux
Fixed in 6.1.25-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.1.25-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.1.25-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.