What’s Vulnerable › Vulnerabilities

CVE-2023-53786: dm flakey: fix a crash with invalid table line

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-09 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: dm flakey: fix a crash with invalid table line This command will crash with NULL pointer dereference: dmsetup create flakey --table \ "0 `blockdev --getsize /dev/ram0` flakey /dev/ram0 0 0 1 2 corrupt_bio_byte 512" Fix the crash by checking if arg_name is non-NULL before comparing it.

Affected products

• Linux kernel: 3.1 — fixed in 6.4

How to fix

Upgrade to a fixed version: Linux kernel 6.4. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/12849ed107c0b2869fb775c81208050899006f07
• https://git.kernel.org/stable/c/337b7af273562b73c46ef77a724604ad139ca762
• https://git.kernel.org/stable/c/8258d84a7917aeece773716518deadb7ad776cb7
• https://git.kernel.org/stable/c/83b4e3d878ea6be9aec1d5a1ab177c766c64d1a0
• https://git.kernel.org/stable/c/98dba02d9a93eec11bffbb93c7c51624290702d2
• https://git.kernel.org/stable/c/a1e3fffe02e05c05357af91364ac0fc1ed425b5b
• https://git.kernel.org/stable/c/cb874a190f3f7c3c3fa5b979bee7a3b8cc3a19cc
• https://git.kernel.org/stable/c/f76fcb9d43ec014ac4a1bb983768696d5b032df9
• https://git.kernel.org/stable/c/f95cb1526669ccdf7eb12eefd57a893953e3595f

Get alerted when CVE-2023-53786 or the next vulnerability affects your stack