CVE-2023-53664: OPP: Fix potential null ptr dereference in dev_pm_opp_get_required_pstate()

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-10-07 · updated 2026-10-28
Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: OPP: Fix potential null ptr dereference in dev_pm_opp_get_required_pstate() "opp" pointer is dereferenced before the IS_ERR_OR_NULL() check. Fix it by removing the dereference to cache opp_table and dereference it directly where opp_table is used. This fixes the following smatch warning: drivers/opp/core.c:232 dev_pm_opp_get_required_pstate() warn: variable dereferenced before IS_ERR check 'opp' (see line 230)

Affected products

Linux kernel: from 6.5 before 6.5.3 — fixed in 6.5.3

How to fix

Upgrade to a fixed version: Linux kernel 6.5.3. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2023-53664 or the next vulnerability affects your stack