CVE-2023-52763
kernel: i3c: master: mipi-i3c-hci: Fix a kernel panic for accessing DAT_data.
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · May 21, 2024
Updated · November 21, 2025
Description
In the Linux kernel, the following vulnerability has been resolved:
i3c: master: mipi-i3c-hci: Fix a kernel panic for accessing DAT_data.
The i3c_master_bus_init function may attach the I2C devices before the
I3C bus initialization. In this flow, the DAT alloc_entry`` will be used before the DAT init. Additionally, if the i3c_master_bus_initfails, the DATcleanupwill execute before the device is detached, which will execue DATfree_entry` function. The above scenario can cause the driver
to use DAT_data when it is NULL.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 4.4CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
CWE-158 · Improper Neutralization of Null Byte or NUL Character