In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/hisi: Drop second sensor hi3660 The commit 74c8e6bffbe1 ("driver core: Add __alloc_size hint to devm allocators") exposes a panic "BRK handler: Fatal exception" on the hi3660_thermal_probe funciton. This is because the function allocates memory for only one sensors array entry, but tries to fill up a second one. Fix this by removing the unneeded second access.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:4.20:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:4.20:rc7:*:*:*:*:*:*

No data.

References
Link Providers
https://git.kernel.org/stable/c/15cc25829a97c3957e520e971868aacc84341317 cve-icon cve-icon
https://git.kernel.org/stable/c/3cf2181e438f43ed24e12424fe36d156cca233b9 cve-icon cve-icon
https://git.kernel.org/stable/c/68e675a9b69cfc34dd915d91a4650e3ee53421f4 cve-icon cve-icon
https://git.kernel.org/stable/c/9f6756cd09889c7201ee31e6f76fbd914fb0b80d cve-icon cve-icon
https://git.kernel.org/stable/c/e02bc492883abf751fd1a8d89fc025fbce6744c6 cve-icon cve-icon
https://git.kernel.org/stable/c/f5aaf140ab1c02889c088e1b1098adad600541af cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025091516-CVE-2023-53242-b7c5@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2023-53242 cve-icon
https://www.cve.org/CVERecord?id=CVE-2023-53242 cve-icon
History

Wed, 03 Dec 2025 20:45:00 +0000

Type Values Removed Values Added
Weaknesses NVD-CWE-noinfo
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:4.20:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:4.20:rc7:*:*:*:*:*:*
Metrics cvssV3_1

{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

Wed, 17 Sep 2025 11:00:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Vendors & Products Linux
Linux linux Kernel

Tue, 16 Sep 2025 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

threat_severity

Important

Mon, 15 Sep 2025 14:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/hisi: Drop second sensor hi3660 The commit 74c8e6bffbe1 ("driver core: Add __alloc_size hint to devm allocators") exposes a panic "BRK handler: Fatal exception" on the hi3660_thermal_probe funciton. This is because the function allocates memory for only one sensors array entry, but tries to fill up a second one. Fix this by removing the unneeded second access.
Title thermal/drivers/hisi: Drop second sensor hi3660
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-09-15T14:23:11.251Z

Updated: 2025-09-15T14:23:11.251Z

Reserved: 2025-09-15T14:19:21.848Z

Link: CVE-2023-53242

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2025-09-15T15:15:51.340

Modified: 2025-12-03T20:41:53.803

Link: CVE-2023-53242

cve-icon Redhat

Severity : Important

Publid Date: 2025-09-15T00:00:00Z

Links: CVE-2023-53242 - Bugzilla