CVE-2023-53786
dm flakey: fix a crash with invalid table line
Reported by linux · Published December 9, 2025
In the Linux kernel, the following vulnerability has been resolved: dm flakey: fix a crash with invalid table line This command will crash with NULL pointer dereference: dmsetup create flakey --table \ "0 `blockdev --getsize /dev/ram0` flakey /dev/ram0 0 0 1 2 corrupt_bio_byte 512" Fix the crash by checking if arg_name is non-NULL before comparing it.
EPSS 0.23% · 14.1th percentile
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| bpftool | Amazon Linux | 6.1.29-47.49.amzn2023 |
| perf | Amazon Linux | 6.1.29-47.49.amzn2023 |
| kernel-headers | Amazon Linux | 4.14.318-240.529.amzn2 |
| kernel | Amazon Linux | 6.1.29-47.49.amzn2023, 4.14.318-240.529.amzn2 |
| kernel-livepatch-4.14.318-240.529 | Amazon Linux | 1.0-0.amzn2 |
| kernel-tools | Amazon Linux | 6.1.29-47.49.amzn2023 |
| kernel-tools-devel | Amazon Linux | 4.14.318-240.529.amzn2 |
| kernel-devel | Amazon Linux | 6.1.29-47.49.amzn2023 |
| kernel-livepatch-6.1.29-47.49 | Amazon Linux | 1.0-0.amzn2023 |
| kernel-libbpf | Amazon Linux | 6.1.29-47.49.amzn2023 |
| Linux | Linux | f95cb1526669ccdf7eb12eefd57a893953e3595f, f76fcb9d43ec014ac4a1bb983768696d5b032df9, cb874a190f3f7c3c3fa5b979bee7a3b8cc3a19cc, a1e3fffe02e05c05357af91364ac0fc1ed425b5b, 98dba02d9a93eec11bffbb93c7c51624290702d2, 83b4e3d878ea6be9aec1d5a1ab177c766c64d1a0, 8258d84a7917aeece773716518deadb7ad776cb7, 337b7af273562b73c46ef77a724604ad139ca762, 12849ed107c0b2869fb775c81208050899006f07 |
Risk scores
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | a3998799fb4df0b0af8271a7d50c4269032397aa, a3998799fb4df0b0af8271a7d50c4269032397aa, a3998799fb4df0b0af8271a7d50c4269032397aa |
| Linux | Linux | 3.1, 0, 4.14.315 |
| amazon:2023 | bpftool | 0 |
| amazon:2023 | perf | 0 |
| amazon:2 | kernel-headers | 0 |
| amazon:2 | kernel | 0 |
| amazon:2 | kernel-livepatch-4.14.318-240.529 | 0 |
| amazon:2023 | kernel | 0 |
| amazon:2023 | kernel-tools | 0 |
| amazon:2 | kernel-tools-devel | 0 |
| amazon:2023 | kernel-devel | 0 |
| amazon:2023 | kernel-livepatch-6.1.29-47.49 | 0 |
| amazon:2023 | kernel-libbpf | 0 |
| Linux | Linux | *, *, * |
| amazon:2023 | python3-perf | 0 |
| amazon:2 | perf | 0 |
| amazon:2023 | kernel-headers | 0 |
| amazon:2023 | kernel-libbpf-static | 0 |
| amazon:2023 | kernel-libbpf-devel | 0 |
| amazon:2023 | kernel-tools-devel | 0 |
…and 4 more
Timeline
- Dec 9, 2025 EPSS Score (30 in total, the first dated here)
- Dec 9, 2025 CVE Published
- Jun 2, 2026 Security Advisory (51 in total, the first dated here)
- Jul 28, 2026 Coalition ESS Score
- Sep 25, 2026 Distribution Patch (48 in total, the first dated here)
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CVE-2023-53786
vulnetix vdb fixes CVE-2023-53786Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CVE-2023-53786/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart