CVE Database›Document archive›CVE-2023-53755

CVE-2023-53755

kernel: dmaengine: ptdma: check for null desc before calling pt_cmd_callback

Loading…

Severity

Moderate

Red Hat Product Security

4.7

CVSS 3.1

Review impact separately from score.

Published · December 8, 2025

Updated · July 22, 2026

Description

AMD PTDMA (Pass-Through DMA) engine crashes the kernel when pt_issue_pending() encounters empty descriptor queues. The function blindly invokes pt_cmd_callback() without verifying that a valid descriptor exists, triggering a NULL pointer dereference. This commonly surfaces during system shutdown on AMD platforms after the DMA engine has been active.

Statement

Systems with AMD processors utilizing PTDMA are vulnerable to kernel panics during specific shutdown sequences. The timing-dependent nature of this bug reduces reproducibility in normal operation.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

To mitigate this issue, prevent the ptdma module from being loaded. See https://access.redhat.com/solutions/41278 for instructions on how to blacklist a kernel module.

CVSS / CWE

CVSS 3.1 · 4.7
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-476 · NULL Pointer Dereference