CVE-2023-53664

A NULL pointer dereference flaw was found in the Linux kernel's OPP (Operating Performance Points) framework in the power state retrieval logic. A local user can trigger this issue by invoking power management operations when the OPP pointer is dereferenced to cache the opp_table before checking whether the pointer is valid. This causes the kernel to dereference a NULL or error pointer, resulting in a kernel crash and denial of service.

The dev_pm_opp_get_required_pstate function attempts to optimize by caching opp->opp_table in a local variable before validating that the opp pointer is non-NULL or not an error value. When the opp pointer is NULL or contains an error code, the dereference on line 230 occurs before the IS_ERR_OR_NULL check on line 232. This violates the principle of checking pointer validity before use and causes an immediate kernel crash when the function is called with invalid input. The issue can occur during power management operations on devices that use the OPP framework for dynamic voltage and frequency scaling.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.