01 Record

CVE-2023-53182

ACPICA: Avoid undefined behavior: applying zero offset to null pointer

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

ACPICA: Avoid undefined behavior: applying zero offset to null pointer

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.16% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 4.8% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Analyzed. NVD last modified this record on 2026-06-17.
Red Hat severity: Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-09-15 14:04Z1 YR AGO

Last updated

2026-05-11 19:39Z5 MO AGO

Reserved

2025-09-15

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-476NULL Pointer DereferenceBase

Data version

5.2

Document digest

9369fed8c2b3953b66d4f1c626b566a1500088317f8fc9cb2bbbf9092816ae8f

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 5a2d0dcb47b16f84880a59571eab8a004e3236d7, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 35465c7a91c6b46e7c14d0c01d0084349a38ce51, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 710e09fd116e2fa53e319a416ad4e4f8027682b6, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 16359bc02c093b0862e31739c07673340a2106a6, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 3a7a4aa3958ce0c4938a443d65001debe9a9af9c, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 8c4a7163b7f1495e3cc58bec7a4100de6612cde9, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 3048c6b84a51e4ba4a89385ed218d19a670edd47, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 05bb0167c80b8f93c6a4e0451b7da9b96db990c2, 2.6.12—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/5a2d0dcb47b16f84880a59571eab8a004e3236d7
git.kernel.orghttps://git.kernel.org/stable/c/35465c7a91c6b46e7c14d0c01d0084349a38ce51
git.kernel.orghttps://git.kernel.org/stable/c/710e09fd116e2fa53e319a416ad4e4f8027682b6
git.kernel.orghttps://git.kernel.org/stable/c/16359bc02c093b0862e31739c07673340a2106a6
git.kernel.orghttps://git.kernel.org/stable/c/3a7a4aa3958ce0c4938a443d65001debe9a9af9c
git.kernel.orghttps://git.kernel.org/stable/c/8c4a7163b7f1495e3cc58bec7a4100de6612cde9
git.kernel.orghttps://git.kernel.org/stable/c/3048c6b84a51e4ba4a89385ed218d19a670edd47
git.kernel.orghttps://git.kernel.org/stable/c/05bb0167c80b8f93c6a4e0451b7da9b96db990c2

07 Fixed in

Debian 12

linux
Fixed in 6.1.37-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.3.7-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.3.7-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.