What’s Vulnerable › Vulnerabilities

CVE-2023-53242: thermal/drivers/hisi: Drop second sensor hi3660

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-09-15 · updated 2026-08-04

Description

In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/hisi: Drop second sensor hi3660 The commit 74c8e6bffbe1 ("driver core: Add __alloc_size hint to devm allocators") exposes a panic "BRK handler: Fatal exception" on the hi3660_thermal_probe funciton. This is because the function allocates memory for only one sensors array entry, but tries to fill up a second one. Fix this by removing the unneeded second access.

Affected products

• Linux kernel: from 4.20.1 before 5.4.235; from 5.5 before 5.10.173; from 5.11 before 5.15.99; from 5.16 before 6.1.16; from 6.2 before 6.2.3; 4.20, 4.20-rc7 — fixed in 5.10.173, 5.15.99, 5.4.235, 6.1.16, 6.2.3

How to fix

Upgrade to a fixed version: Linux kernel 5.10.173, 5.15.99, 5.4.235, 6.1.16. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/15cc25829a97c3957e520e971868aacc84341317
• https://git.kernel.org/stable/c/3cf2181e438f43ed24e12424fe36d156cca233b9
• https://git.kernel.org/stable/c/68e675a9b69cfc34dd915d91a4650e3ee53421f4
• https://git.kernel.org/stable/c/9f6756cd09889c7201ee31e6f76fbd914fb0b80d
• https://git.kernel.org/stable/c/e02bc492883abf751fd1a8d89fc025fbce6744c6
• https://git.kernel.org/stable/c/f5aaf140ab1c02889c088e1b1098adad600541af

Get alerted when CVE-2023-53242 or the next vulnerability affects your stack