CVE-2023-52473
kernel: NULL pointer dereference in zone registration error path
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · February 26, 2024
Updated · June 28, 2026
Description
is a security vulnerability in the Linux kernel, specifically within the thermal management subsystem. This vulnerability is a NULL pointer dereference that occurs in the thermal_zone_device_register_with_trips() function during the thermal zone registration error path. This issue can cause crashes and system instability.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
There are no known mitigations to the problem. Red Hat recommends updating to the latest version of the software.
CVSS / CWE
CVSS 3.1 · 2.3CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
CWE-476 · NULL Pointer Dereference