Dashboard / CVE-2023-53470

CVE-2023-53470

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2025-10-01 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: ionic: catch failure from devlink_alloc Add a check for NULL on the alloc return. If devlink_alloc() fails and we try to use devlink_priv() on the NULL return, the kernel gets very unhappy and panics. With this fix, the driver load will still fail, but at least it won't panic the kernel.

Weakness Classification (1)

Affected Software (7)

VendorProductVersion
Linux Linux df69ba43217d3cf4215c83c0627ce98a26e56e7c < c177dd465f5c1e5f242cdb9258826c591c257e9a
Linux Linux df69ba43217d3cf4215c83c0627ce98a26e56e7c < 0d02efe7f25158c93146e3bb827bc7bb3cd5e71a
Linux Linux df69ba43217d3cf4215c83c0627ce98a26e56e7c < 5325f50de5b1433b27dda7ccff5cb7283722a3f1
Linux Linux df69ba43217d3cf4215c83c0627ce98a26e56e7c < 0020c16c8af7f4bc9503a2088fb30793b6771fac
Linux Linux df69ba43217d3cf4215c83c0627ce98a26e56e7c < 4a54903ff68ddb33b6463c94b4eb37fc584ef760
Linux Linux 5.4
linux linux_kernel 5.4 – 5.15.112

References & Advisories (5)

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.16%
Raw Score 0.001590
Percentile 5.1%
Date 2026-11-14

EPSS Trend

2026-11-14
0.00159
2026-11-13
0.00159
2026-11-12
0.00159
2026-11-10
0.00159
2026-11-09
0.00159
2026-11-08
0.00159
2026-11-07
0.00159
2026-11-06
0.00159
2026-11-05
0.00159

Intelligence Sources

mitre ref →
nvd ref →

External Links