CVE-2023-53786
kernel: dm flakey: fix a crash with invalid table line
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · December 9, 2025
Updated · July 22, 2026
Description
A flaw was identified in the device-mapper “dm flakey” target in the Linux kernel where invalid table line input can lead to a NULL pointer dereference. Specifically, when dmsetup is used with a malformed table line (such as with the corrupt_bio_byte target) and the arg_name pointer is NULL, the kernel attempts to dereference it, leading to a system crash (kernel panic). This is due to insufficient validation of input arguments before use
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
CVSS / CWE
CVSS 3.1 · 4.7CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-476 · NULL Pointer Dereference