NetSight
IP …
medium5.5

CVE-2023-53005

In the Linux kernel, the following vulnerability has been resolved: trace_events_hist: add check for return value of 'create_hist_field' Function 'create_hist_…

Impact

In the Linux kernel, the following vulnerability has been resolved: trace_events_hist: add check for return value of 'create_hist_field' Function 'create_hist_field' is called recursively at trace_events_hist.c:1954 and can return NULL-value that's why we have to check it to avoid null pointer dereference. Found by Linux Verification Center (linuxtesting.org) with SVACE.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.17 before 4.19.272
from 4.20 before 5.4.231
from 5.5 before 5.10.166
from 5.11 before 5.15.91
from 5.16 before 6.1.9
Version 6.2

Weakness classification

CWE-476

References