SB2025091863 - NULL pointer dereference in Linux kernel core
Published: September 18, 2025 Updated: September 22, 2025
Security Bulletin ID
SB2025091863
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) NULL pointer dereference (CVE-ID: CVE-2023-53354)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to NULL pointer dereference within the skb_segment() function in net/core/skbuff.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/04c3eee4e13f60bf6f9a366ad39f88a01a57166e
- https://git.kernel.org/stable/c/2ea35288c83b3d501a88bc17f2df8f176b5cc96f
- https://git.kernel.org/stable/c/6c26ed3c6abe86ddab0510529000b970b05c9b40
- https://git.kernel.org/stable/c/8836c266201c29a5acb4f582227686f47b65ad61
- https://git.kernel.org/stable/c/d44403ec0676317b7f7edf2a035bb219fee3304e
- https://git.kernel.org/stable/c/d5790386595d06ea9decfd9ba5f1ea48cf09aa02
- https://git.kernel.org/stable/c/f99006e840a4dbc8f5a34cecc6b5b26c73ef49bb
- https://git.kernel.org/stable/c/fcab3f661dbfd88e27ddbbe65368f3fa2d823175
- https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.295