{
  "schemaVersion": 1,
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "record": {
    "id": "CVE-2023-53250",
    "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2023-53250",
    "idYear": 2023,
    "status": "PUBLISHED",
    "publishedAt": "2025-09-15T14:46:20.011Z",
    "updatedAt": "2026-05-23T15:28:24.206Z",
    "importedAt": "2026-10-24T01:57:03.413Z",
    "snapshot": {
      "id": "cve_2026-10-24_midnight_baseline",
      "at": "2026-10-24T00:00:00.000Z",
      "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z"
    },
    "facts": {
      "title": "firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle",
      "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nfirmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle\n\nKASAN reported a null-ptr-deref error:\n\nKASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]\nCPU: 0 PID: 1373 Comm: modprobe\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996)\nRIP: 0010:dmi_sysfs_entry_release\n...\nCall Trace:\n <TASK>\n kobject_put\n dmi_sysfs_register_handle (drivers/firmware/dmi-sysfs.c:540) dmi_sysfs\n dmi_decode_table (drivers/firmware/dmi_scan.c:133)\n dmi_walk (drivers/firmware/dmi_scan.c:1115)\n dmi_sysfs_init (drivers/firmware/dmi-sysfs.c:149) dmi_sysfs\n do_one_initcall (init/main.c:1296)\n ...\nKernel panic - not syncing: Fatal exception\nKernel Offset: 0x4000000 from 0xffffffff81000000\n---[ end Kernel panic - not syncing: Fatal exception ]---\n\nIt is because previous patch added kobject_put() to release the memory\nwhich will call  dmi_sysfs_entry_release() and list_del().\n\nHowever, list_add_tail(entry->list) is called after the error block,\nso the list_head is uninitialized and cannot be deleted.\n\nMove error handling to after list_add_tail to fix this.",
      "affected": [
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "fdffa4ad8f6bf1ece877edfb807f2b2c729d8578",
              "status": "affected",
              "versionType": "git",
              "lessThan": "b4fe158259fb5fead52ff2b55841ec5c39492604"
            },
            {
              "version": "660ba678f9998aca6db74f2dd912fa5124f0fa31",
              "status": "affected",
              "versionType": "git",
              "lessThan": "e851996b32264e78a10863c2ac41a8689d7b9252"
            },
            {
              "version": "660ba678f9998aca6db74f2dd912fa5124f0fa31",
              "status": "affected",
              "versionType": "git",
              "lessThan": "5d0492d1d934642bdfd2057acc1b56f4b57be465"
            },
            {
              "version": "660ba678f9998aca6db74f2dd912fa5124f0fa31",
              "status": "affected",
              "versionType": "git",
              "lessThan": "18e126e97c961f7a93823795c879d7c085fe5098"
            },
            {
              "version": "a9bfb37d6ba7c376b0d53337a4c5f5ff324bd725",
              "status": "affected",
              "versionType": "git"
            },
            {
              "version": "ed38d04342dfbe9e5aca745c8b5eb4188a74f0ef",
              "status": "affected",
              "versionType": "git"
            },
            {
              "version": "c66cc3c62870a27ea8f060a7e4c1ad8d26dd3f0d",
              "status": "affected",
              "versionType": "git"
            },
            {
              "version": "a724634b2a49f6ff0177a9e19a5a92fc1545e1b7",
              "status": "affected",
              "versionType": "git"
            },
            {
              "version": "985706bd3bbeffc8737bc05965ca8d24837bc7db",
              "status": "affected",
              "versionType": "git"
            },
            {
              "version": "3ba359ebe914ac3f8c6c832b28007c14c39d3766",
              "status": "affected",
              "versionType": "git"
            },
            {
              "version": "ec752973aa721ee281d5441e497364637c626c7b",
              "status": "affected",
              "versionType": "git"
            },
            {
              "version": "5.15.47",
              "status": "affected",
              "versionType": "semver",
              "lessThan": "5.15.99"
            },
            {
              "version": "4.9.318",
              "status": "affected",
              "versionType": "semver",
              "lessThan": "4.10"
            },
            {
              "version": "4.14.283",
              "status": "affected",
              "versionType": "semver",
              "lessThan": "4.15"
            },
            {
              "version": "4.19.247",
              "status": "affected",
              "versionType": "semver",
              "lessThan": "4.20"
            },
            {
              "version": "5.4.198",
              "status": "affected",
              "versionType": "semver",
              "lessThan": "5.5"
            },
            {
              "version": "5.10.122",
              "status": "affected",
              "versionType": "semver",
              "lessThan": "5.11"
            },
            {
              "version": "5.17.15",
              "status": "affected",
              "versionType": "semver",
              "lessThan": "5.18"
            },
            {
              "version": "5.18.4",
              "status": "affected",
              "versionType": "semver",
              "lessThan": "5.19"
            }
          ]
        },
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "affected",
          "versions": [
            {
              "version": "5.19",
              "status": "affected"
            },
            {
              "version": "0",
              "status": "unaffected",
              "versionType": "semver",
              "lessThan": "5.19"
            },
            {
              "version": "5.15.99",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.15.*"
            },
            {
              "version": "6.1.16",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.*"
            },
            {
              "version": "6.2.3",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.2.*"
            },
            {
              "version": "6.3",
              "status": "unaffected",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ]
        }
      ]
    }
  }
}