CVE-2023-53483

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux SIG Cloud 8.10 Release Notes linked from the References section.

In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: Check for null return of devm_kzalloc() in fch_misc_setup() devm_kzalloc() may fail, clk_data->name might be NULL and will cause a NULL pointer dereference later. [ rjw: Subject and changelog edits ]

• nfs: fix possible null-ptr-deref when parsing param {CVE-2022-50455}
• KVM: arm64: Disassociate vcpus from redistributor region on teardown {CVE-2024-40989}
• HID: core: Harden s32ton() against conversion to 0 bits {CVE-2025-38556}
• ALSA: usb-audio: Validate UAC3 cluster segment descriptors {CVE-2025-39757}
• tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg {CVE-2024-56633}
• ovl: Filter invalid inodes with missing lookup function {CVE-2024-56570}
• ACPI: processor: Check for null return of devm_kzalloc() in fch_misc_setup() {CVE-2023-53483}
• crypto: seqiv - Handle EBUSY correctly {CVE-2023-53373}
• KVM: nSVM: Check instead of asserting on nested TSC scaling support {CVE-2023-53663}
• ice: Don't tx before switchdev is fully configured {CVE-2023-53657}
• rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed {CVE-2023-53655}
• mm/swap: fix swap_info_struct race between swapoff and get_swap_pages() {CVE-2023-53623}
• ext4: fix bug_on in __es_tree_search caused by bad boot loader inode {CVE-2022-50485}
• ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode {CVE-2022-50485}
• ext4: add helper to check quota inums {CVE-2022-50485}
• ext4: fix bug_on in __es_tree_search caused by bad quota inode {CVE-2022-50485}
• swiotlb: Fix double-allocation of slots due to broken alignment handling {CVE-2024-35814}
• swiotlb: fix a braino in the alignment check fix {CVE-2024-35814}
• swiotlb: fix slot alignment checks {CVE-2024-35814}
• swiotlb: fix the deadlock in swiotlb_do_find_slots
• drm/radeon: free iio for atombios when driver shutdown {CVE-2023-53453}

In the Linux kernel, the following vulnerability has been resolved:

ACPI: processor: Check for null return of devm_kzalloc() in fch_misc_setup()

devm_kzalloc() may fail, clk_data->name might be NULL and will cause a NULL pointer dereference later.

[ rjw: Subject and changelog edits ]

Root has patched CVE-2023-53483 in the linux package for Root:Debian:11. Multiple fixed versions available.

Root has patched CVE-2023-53483 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.