GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2023-52808 (GCVE-0-2023-52808)

Vulnerability from cvelistv5 – Published: 2024-05-21 15:31 – Updated: 2026-05-11 19:33
VLAI
Title
scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
Summary
In the Linux kernel, the following vulnerability has been resolved: scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs If init debugfs failed during device registration due to memory allocation failure, debugfs_remove_recursive() is called, after which debugfs_dir is not set to NULL. debugfs_remove_recursive() will be called again during device removal. As a result, illegal pointer is accessed. [ 1665.467244] hisi_sas_v3_hw 0000:b4:02.0: failed to init debugfs! ... [ 1669.836708] Unable to handle kernel NULL pointer dereference at virtual address 00000000000000a0 [ 1669.872669] pc : down_write+0x24/0x70 [ 1669.876315] lr : down_write+0x1c/0x70 [ 1669.879961] sp : ffff000036f53a30 [ 1669.883260] x29: ffff000036f53a30 x28: ffffa027c31549f8 [ 1669.888547] x27: ffffa027c3140000 x26: 0000000000000000 [ 1669.893834] x25: ffffa027bf37c270 x24: ffffa027bf37c270 [ 1669.899122] x23: ffff0000095406b8 x22: ffff0000095406a8 [ 1669.904408] x21: 0000000000000000 x20: ffffa027bf37c310 [ 1669.909695] x19: 00000000000000a0 x18: ffff8027dcd86f10 [ 1669.914982] x17: 0000000000000000 x16: 0000000000000000 [ 1669.920268] x15: 0000000000000000 x14: ffffa0274014f870 [ 1669.925555] x13: 0000000000000040 x12: 0000000000000228 [ 1669.930842] x11: 0000000000000020 x10: 0000000000000bb0 [ 1669.936129] x9 : ffff000036f537f0 x8 : ffff80273088ca10 [ 1669.941416] x7 : 000000000000001d x6 : 00000000ffffffff [ 1669.946702] x5 : ffff000008a36310 x4 : ffff80273088be00 [ 1669.951989] x3 : ffff000009513e90 x2 : 0000000000000000 [ 1669.957276] x1 : 00000000000000a0 x0 : ffffffff00000001 [ 1669.962563] Call trace: [ 1669.965000] down_write+0x24/0x70 [ 1669.968301] debugfs_remove_recursive+0x5c/0x1b0 [ 1669.972905] hisi_sas_debugfs_exit+0x24/0x30 [hisi_sas_main] [ 1669.978541] hisi_sas_v3_remove+0x130/0x150 [hisi_sas_v3_hw] [ 1669.984175] pci_device_remove+0x48/0xd8 [ 1669.988082] device_release_driver_internal+0x1b4/0x250 [ 1669.993282] device_release_driver+0x28/0x38 [ 1669.997534] pci_stop_bus_device+0x84/0xb8 [ 1670.001611] pci_stop_and_remove_bus_device_locked+0x24/0x40 [ 1670.007244] remove_store+0xfc/0x140 [ 1670.010802] dev_attr_store+0x44/0x60 [ 1670.014448] sysfs_kf_write+0x58/0x80 [ 1670.018095] kernfs_fop_write+0xe8/0x1f0 [ 1670.022000] __vfs_write+0x60/0x190 [ 1670.025472] vfs_write+0xac/0x1c0 [ 1670.028771] ksys_write+0x6c/0xd8 [ 1670.032071] __arm64_sys_write+0x24/0x30 [ 1670.035977] el0_svc_common+0x78/0x130 [ 1670.039710] el0_svc_handler+0x38/0x78 [ 1670.043442] el0_svc+0x8/0xc To fix this, set debugfs_dir to NULL after debugfs_remove_recursive().
Severity
No CVSS data available.
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-05-22 19:30 UTC
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 47caad1577cd7a39e2048c5e4edbce4b863dc12b , < f0bfc8a5561fb0b2c48183dcbfe00bdd6d973bd3 (git)
Affected: 47caad1577cd7a39e2048c5e4edbce4b863dc12b , < 33331b265aac9441ac0c1a5442e3f05d038240ec (git)
Affected: 47caad1577cd7a39e2048c5e4edbce4b863dc12b , < 75a2656260fe8c7eeabda6ff4600b29e183f48db (git)
Affected: 47caad1577cd7a39e2048c5e4edbce4b863dc12b , < b4465009e7d60c6111946db4c8f1e50d401ed7be (git)
Affected: 47caad1577cd7a39e2048c5e4edbce4b863dc12b , < 6de426f9276c448e2db7238911c97fb157cb23be (git)
guessed Create a notification for this product.
Linux Linux Affected: 4.5
Unaffected: 0 , < 4.5 (semver)
Unaffected: 5.15.140 , ≤ 5.15.* (semver)
Unaffected: 6.1.64 , ≤ 6.1.* (semver)
Unaffected: 6.5.13 , ≤ 6.5.* (semver)
Unaffected: 6.6.3 , ≤ 6.6.* (semver)
Unaffected: 6.7 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-52808",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-05-22T19:30:55.612970Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-04T17:24:03.695Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T23:11:35.709Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/f0bfc8a5561fb0b2c48183dcbfe00bdd6d973bd3"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/33331b265aac9441ac0c1a5442e3f05d038240ec"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/75a2656260fe8c7eeabda6ff4600b29e183f48db"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/b4465009e7d60c6111946db4c8f1e50d401ed7be"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/6de426f9276c448e2db7238911c97fb157cb23be"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/scsi/hisi_sas/hisi_sas_v3_hw.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "f0bfc8a5561fb0b2c48183dcbfe00bdd6d973bd3",
              "status": "affected",
              "version": "47caad1577cd7a39e2048c5e4edbce4b863dc12b",
              "versionType": "git"
            },
            {
              "lessThan": "33331b265aac9441ac0c1a5442e3f05d038240ec",
              "status": "affected",
              "version": "47caad1577cd7a39e2048c5e4edbce4b863dc12b",
              "versionType": "git"
            },
            {
              "lessThan": "75a2656260fe8c7eeabda6ff4600b29e183f48db",
              "status": "affected",
              "version": "47caad1577cd7a39e2048c5e4edbce4b863dc12b",
              "versionType": "git"
            },
            {
              "lessThan": "b4465009e7d60c6111946db4c8f1e50d401ed7be",
              "status": "affected",
              "version": "47caad1577cd7a39e2048c5e4edbce4b863dc12b",
              "versionType": "git"
            },
            {
              "lessThan": "6de426f9276c448e2db7238911c97fb157cb23be",
              "status": "affected",
              "version": "47caad1577cd7a39e2048c5e4edbce4b863dc12b",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/scsi/hisi_sas/hisi_sas_v3_hw.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.5"
            },
            {
              "lessThan": "4.5",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.140",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.64",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.5.*",
              "status": "unaffected",
              "version": "6.5.13",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.7",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.140",
                  "versionStartIncluding": "4.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.64",
                  "versionStartIncluding": "4.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.5.13",
                  "versionStartIncluding": "4.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.3",
                  "versionStartIncluding": "4.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.7",
                  "versionStartIncluding": "4.5",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs\n\nIf init debugfs failed during device registration due to memory allocation\nfailure, debugfs_remove_recursive() is called, after which debugfs_dir is\nnot set to NULL. debugfs_remove_recursive() will be called again during\ndevice removal. As a result, illegal pointer is accessed.\n\n[ 1665.467244] hisi_sas_v3_hw 0000:b4:02.0: failed to init debugfs!\n...\n[ 1669.836708] Unable to handle kernel NULL pointer dereference at virtual address 00000000000000a0\n[ 1669.872669] pc : down_write+0x24/0x70\n[ 1669.876315] lr : down_write+0x1c/0x70\n[ 1669.879961] sp : ffff000036f53a30\n[ 1669.883260] x29: ffff000036f53a30 x28: ffffa027c31549f8\n[ 1669.888547] x27: ffffa027c3140000 x26: 0000000000000000\n[ 1669.893834] x25: ffffa027bf37c270 x24: ffffa027bf37c270\n[ 1669.899122] x23: ffff0000095406b8 x22: ffff0000095406a8\n[ 1669.904408] x21: 0000000000000000 x20: ffffa027bf37c310\n[ 1669.909695] x19: 00000000000000a0 x18: ffff8027dcd86f10\n[ 1669.914982] x17: 0000000000000000 x16: 0000000000000000\n[ 1669.920268] x15: 0000000000000000 x14: ffffa0274014f870\n[ 1669.925555] x13: 0000000000000040 x12: 0000000000000228\n[ 1669.930842] x11: 0000000000000020 x10: 0000000000000bb0\n[ 1669.936129] x9 : ffff000036f537f0 x8 : ffff80273088ca10\n[ 1669.941416] x7 : 000000000000001d x6 : 00000000ffffffff\n[ 1669.946702] x5 : ffff000008a36310 x4 : ffff80273088be00\n[ 1669.951989] x3 : ffff000009513e90 x2 : 0000000000000000\n[ 1669.957276] x1 : 00000000000000a0 x0 : ffffffff00000001\n[ 1669.962563] Call trace:\n[ 1669.965000]  down_write+0x24/0x70\n[ 1669.968301]  debugfs_remove_recursive+0x5c/0x1b0\n[ 1669.972905]  hisi_sas_debugfs_exit+0x24/0x30 [hisi_sas_main]\n[ 1669.978541]  hisi_sas_v3_remove+0x130/0x150 [hisi_sas_v3_hw]\n[ 1669.984175]  pci_device_remove+0x48/0xd8\n[ 1669.988082]  device_release_driver_internal+0x1b4/0x250\n[ 1669.993282]  device_release_driver+0x28/0x38\n[ 1669.997534]  pci_stop_bus_device+0x84/0xb8\n[ 1670.001611]  pci_stop_and_remove_bus_device_locked+0x24/0x40\n[ 1670.007244]  remove_store+0xfc/0x140\n[ 1670.010802]  dev_attr_store+0x44/0x60\n[ 1670.014448]  sysfs_kf_write+0x58/0x80\n[ 1670.018095]  kernfs_fop_write+0xe8/0x1f0\n[ 1670.022000]  __vfs_write+0x60/0x190\n[ 1670.025472]  vfs_write+0xac/0x1c0\n[ 1670.028771]  ksys_write+0x6c/0xd8\n[ 1670.032071]  __arm64_sys_write+0x24/0x30\n[ 1670.035977]  el0_svc_common+0x78/0x130\n[ 1670.039710]  el0_svc_handler+0x38/0x78\n[ 1670.043442]  el0_svc+0x8/0xc\n\nTo fix this, set debugfs_dir to NULL after debugfs_remove_recursive()."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T19:33:30.737Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/f0bfc8a5561fb0b2c48183dcbfe00bdd6d973bd3"
        },
        {
          "url": "https://git.kernel.org/stable/c/33331b265aac9441ac0c1a5442e3f05d038240ec"
        },
        {
          "url": "https://git.kernel.org/stable/c/75a2656260fe8c7eeabda6ff4600b29e183f48db"
        },
        {
          "url": "https://git.kernel.org/stable/c/b4465009e7d60c6111946db4c8f1e50d401ed7be"
        },
        {
          "url": "https://git.kernel.org/stable/c/6de426f9276c448e2db7238911c97fb157cb23be"
        }
      ],
      "title": "scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-52808",
    "datePublished": "2024-05-21T15:31:18.330Z",
    "dateReserved": "2024-05-21T15:19:24.248Z",
    "dateUpdated": "2026-05-11T19:33:30.737Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2023-52808",
      "date": "2026-09-16",
      "epss": "0.00239",
      "percentile": "0.15108"
    },
    "fkie_nvd": {
      "descriptions": "[{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nscsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs\\n\\nIf init debugfs failed during device registration due to memory allocation\\nfailure, debugfs_remove_recursive() is called, after which debugfs_dir is\\nnot set to NULL. debugfs_remove_recursive() will be called again during\\ndevice removal. As a result, illegal pointer is accessed.\\n\\n[ 1665.467244] hisi_sas_v3_hw 0000:b4:02.0: failed to init debugfs!\\n...\\n[ 1669.836708] Unable to handle kernel NULL pointer dereference at virtual address 00000000000000a0\\n[ 1669.872669] pc : down_write+0x24/0x70\\n[ 1669.876315] lr : down_write+0x1c/0x70\\n[ 1669.879961] sp : ffff000036f53a30\\n[ 1669.883260] x29: ffff000036f53a30 x28: ffffa027c31549f8\\n[ 1669.888547] x27: ffffa027c3140000 x26: 0000000000000000\\n[ 1669.893834] x25: ffffa027bf37c270 x24: ffffa027bf37c270\\n[ 1669.899122] x23: ffff0000095406b8 x22: ffff0000095406a8\\n[ 1669.904408] x21: 0000000000000000 x20: ffffa027bf37c310\\n[ 1669.909695] x19: 00000000000000a0 x18: ffff8027dcd86f10\\n[ 1669.914982] x17: 0000000000000000 x16: 0000000000000000\\n[ 1669.920268] x15: 0000000000000000 x14: ffffa0274014f870\\n[ 1669.925555] x13: 0000000000000040 x12: 0000000000000228\\n[ 1669.930842] x11: 0000000000000020 x10: 0000000000000bb0\\n[ 1669.936129] x9 : ffff000036f537f0 x8 : ffff80273088ca10\\n[ 1669.941416] x7 : 000000000000001d x6 : 00000000ffffffff\\n[ 1669.946702] x5 : ffff000008a36310 x4 : ffff80273088be00\\n[ 1669.951989] x3 : ffff000009513e90 x2 : 0000000000000000\\n[ 1669.957276] x1 : 00000000000000a0 x0 : ffffffff00000001\\n[ 1669.962563] Call trace:\\n[ 1669.965000]  down_write+0x24/0x70\\n[ 1669.968301]  debugfs_remove_recursive+0x5c/0x1b0\\n[ 1669.972905]  hisi_sas_debugfs_exit+0x24/0x30 [hisi_sas_main]\\n[ 1669.978541]  hisi_sas_v3_remove+0x130/0x150 [hisi_sas_v3_hw]\\n[ 1669.984175]  pci_device_remove+0x48/0xd8\\n[ 1669.988082]  device_release_driver_internal+0x1b4/0x250\\n[ 1669.993282]  device_release_driver+0x28/0x38\\n[ 1669.997534]  pci_stop_bus_device+0x84/0xb8\\n[ 1670.001611]  pci_stop_and_remove_bus_device_locked+0x24/0x40\\n[ 1670.007244]  remove_store+0xfc/0x140\\n[ 1670.010802]  dev_attr_store+0x44/0x60\\n[ 1670.014448]  sysfs_kf_write+0x58/0x80\\n[ 1670.018095]  kernfs_fop_write+0xe8/0x1f0\\n[ 1670.022000]  __vfs_write+0x60/0x190\\n[ 1670.025472]  vfs_write+0xac/0x1c0\\n[ 1670.028771]  ksys_write+0x6c/0xd8\\n[ 1670.032071]  __arm64_sys_write+0x24/0x30\\n[ 1670.035977]  el0_svc_common+0x78/0x130\\n[ 1670.039710]  el0_svc_handler+0x38/0x78\\n[ 1670.043442]  el0_svc+0x8/0xc\\n\\nTo fix this, set debugfs_dir to NULL after debugfs_remove_recursive().\"}, {\"lang\": \"es\", \"value\": \"En el kernel de Linux, se resolvi\\u00f3 la siguiente vulnerabilidad: scsi: hisi_sas: establezca el puntero debugfs_dir en NULL despu\\u00e9s de eliminar debugfs. Si init debugfs fall\\u00f3 durante el registro del dispositivo debido a un fallo en la asignaci\\u00f3n de memoria, se llama a debugfs_remove_recursive(), despu\\u00e9s de lo cual debugfs_dir no se configura en NULO. Se volver\\u00e1 a llamar a debugfs_remove_recursive() durante la eliminaci\\u00f3n del dispositivo. Como resultado, se accede a un puntero ilegal. [1665.467244] hisi_sas_v3_hw 0000:b4:02.0: \\u00a1no se pudo iniciar debugfs! ... [1669.836708] No se puede manejar la desreferencia del puntero NULL del kernel en la direcci\\u00f3n virtual 00000000000000a0 [1669.872669] pc: down_write+0x24/0x70 [1669.876315] lr: down_write+0x1c/0x70 [1669.879961] sp: ffff000036f53a30 [ 1669.883260] x29: ffff000036f53a30 x28 : ffffa027c31549f8 [ 1669.888547] x27: ffffa027c3140000 x26: 0000000000000000 [ 1669.893834] x25: ffffa027bf37c270 x24: ffffa027bf37c270 [ 166 9.899122] x23: ffff0000095406b8 x22: ffff0000095406a8 [ 1669.904408] x21: 00000000000000000 x20: ffffa027bf37c310 [ 1669.909695] x19: 000000000a0 x18: ffff8027dcd86f10 [1669.914982] x17: 0000000000000000 x16: 0000000000000000 [ 1669.920268] x15: 0000000000000000 x14: ffffa0274014f870 [ 1669.925555] x13: 000000000 0000040 x12: 0000000000000228 [1669.930842] x11: 0000000000000020 x10: 0000000000000bb0 [1669.936129] x9: ffff000036f537f0 x8: 73088ca10 [1669.941416] x7: 000000000000001d x6: 00000000ffffffff [ 1669.946702] x5 : ffff000008a36310 x4 : ffff80273088be00 [ 1669.951989 ] x3 : ffff000009513e90 x2 : 0000000000000000 [ 1669.95 7276] x1: 00000000000000a0 x0: ffffffff00000001 [1669.962563] Seguimiento de llamadas: [1669.965000] down_write+0x24/0x70 [1669.968301] debugfs_remove_recursive+0x5c/0x1b0 [ 1669.972905] hisi_sas_debugfs_exit+0x24/0x30 [hisi_sas_main] [ 1669.978541] hisi_sas_v3_remove+0x130/0x150 [hisi_sas_v3_hw] [ 1669.984175] pci_device_remove+0x48/0 xd8 [ 1669.988082] device_release_driver_internal+0x1b4/0x250 [ 1669.993282] device_release_driver+0x28/0x38 [ 1669.997534] pci_stop_bus_device +0x84/0xb8 [ 1670.001611] pci_stop_and_remove_bus_device_locked+0x24/0x40 [ 1670.007244] remove_store+0xfc/0x140 [ 1670.010802] dev_attr_store+0x44/0x60 [ 1670.01444 8] sysfs_kf_write+0x58/0x80 [ 1670.018095] kernfs_fop_write+0xe8/0x1f0 [ 1670.022000] __vfs_write+0x60 /0x190 [ 1670.025472] vfs_write+0xac/0x1c0 [ 1670.028771] ksys_write+0x6c/0xd8 [ 1670.032071] __arm64_sys_write+0x24/0x30 [ 1670.035977] +0x78/0x130 [ 1670.039710] el0_svc_handler+0x38/0x78 [ 1670.043442] el0_svc+0x8/0xc Para solucionar este problema, establezca debugfs_dir en NULL despu\\u00e9s de debugfs_remove_recursive().\"}]",
      "id": "CVE-2023-52808",
      "lastModified": "2024-11-21T08:40:37.927",
      "published": "2024-05-21T16:15:19.113",
      "references": "[{\"url\": \"https://git.kernel.org/stable/c/33331b265aac9441ac0c1a5442e3f05d038240ec\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/6de426f9276c448e2db7238911c97fb157cb23be\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/75a2656260fe8c7eeabda6ff4600b29e183f48db\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/b4465009e7d60c6111946db4c8f1e50d401ed7be\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/f0bfc8a5561fb0b2c48183dcbfe00bdd6d973bd3\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/33331b265aac9441ac0c1a5442e3f05d038240ec\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/6de426f9276c448e2db7238911c97fb157cb23be\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/75a2656260fe8c7eeabda6ff4600b29e183f48db\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/b4465009e7d60c6111946db4c8f1e50d401ed7be\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/f0bfc8a5561fb0b2c48183dcbfe00bdd6d973bd3\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
      "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "vulnStatus": "Awaiting Analysis"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2023-52808\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-05-21T16:15:19.113\",\"lastModified\":\"2026-06-17T06:43:37.820\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nscsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs\\n\\nIf init debugfs failed during device registration due to memory allocation\\nfailure, debugfs_remove_recursive() is called, after which debugfs_dir is\\nnot set to NULL. debugfs_remove_recursive() will be called again during\\ndevice removal. As a result, illegal pointer is accessed.\\n\\n[ 1665.467244] hisi_sas_v3_hw 0000:b4:02.0: failed to init debugfs!\\n...\\n[ 1669.836708] Unable to handle kernel NULL pointer dereference at virtual address 00000000000000a0\\n[ 1669.872669] pc : down_write+0x24/0x70\\n[ 1669.876315] lr : down_write+0x1c/0x70\\n[ 1669.879961] sp : ffff000036f53a30\\n[ 1669.883260] x29: ffff000036f53a30 x28: ffffa027c31549f8\\n[ 1669.888547] x27: ffffa027c3140000 x26: 0000000000000000\\n[ 1669.893834] x25: ffffa027bf37c270 x24: ffffa027bf37c270\\n[ 1669.899122] x23: ffff0000095406b8 x22: ffff0000095406a8\\n[ 1669.904408] x21: 0000000000000000 x20: ffffa027bf37c310\\n[ 1669.909695] x19: 00000000000000a0 x18: ffff8027dcd86f10\\n[ 1669.914982] x17: 0000000000000000 x16: 0000000000000000\\n[ 1669.920268] x15: 0000000000000000 x14: ffffa0274014f870\\n[ 1669.925555] x13: 0000000000000040 x12: 0000000000000228\\n[ 1669.930842] x11: 0000000000000020 x10: 0000000000000bb0\\n[ 1669.936129] x9 : ffff000036f537f0 x8 : ffff80273088ca10\\n[ 1669.941416] x7 : 000000000000001d x6 : 00000000ffffffff\\n[ 1669.946702] x5 : ffff000008a36310 x4 : ffff80273088be00\\n[ 1669.951989] x3 : ffff000009513e90 x2 : 0000000000000000\\n[ 1669.957276] x1 : 00000000000000a0 x0 : ffffffff00000001\\n[ 1669.962563] Call trace:\\n[ 1669.965000]  down_write+0x24/0x70\\n[ 1669.968301]  debugfs_remove_recursive+0x5c/0x1b0\\n[ 1669.972905]  hisi_sas_debugfs_exit+0x24/0x30 [hisi_sas_main]\\n[ 1669.978541]  hisi_sas_v3_remove+0x130/0x150 [hisi_sas_v3_hw]\\n[ 1669.984175]  pci_device_remove+0x48/0xd8\\n[ 1669.988082]  device_release_driver_internal+0x1b4/0x250\\n[ 1669.993282]  device_release_driver+0x28/0x38\\n[ 1669.997534]  pci_stop_bus_device+0x84/0xb8\\n[ 1670.001611]  pci_stop_and_remove_bus_device_locked+0x24/0x40\\n[ 1670.007244]  remove_store+0xfc/0x140\\n[ 1670.010802]  dev_attr_store+0x44/0x60\\n[ 1670.014448]  sysfs_kf_write+0x58/0x80\\n[ 1670.018095]  kernfs_fop_write+0xe8/0x1f0\\n[ 1670.022000]  __vfs_write+0x60/0x190\\n[ 1670.025472]  vfs_write+0xac/0x1c0\\n[ 1670.028771]  ksys_write+0x6c/0xd8\\n[ 1670.032071]  __arm64_sys_write+0x24/0x30\\n[ 1670.035977]  el0_svc_common+0x78/0x130\\n[ 1670.039710]  el0_svc_handler+0x38/0x78\\n[ 1670.043442]  el0_svc+0x8/0xc\\n\\nTo fix this, set debugfs_dir to NULL after debugfs_remove_recursive().\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: scsi: hisi_sas: establezca el puntero debugfs_dir en NULL despu\u00e9s de eliminar debugfs. Si init debugfs fall\u00f3 durante el registro del dispositivo debido a un fallo en la asignaci\u00f3n de memoria, se llama a debugfs_remove_recursive(), despu\u00e9s de lo cual debugfs_dir no se configura en NULO. Se volver\u00e1 a llamar a debugfs_remove_recursive() durante la eliminaci\u00f3n del dispositivo. Como resultado, se accede a un puntero ilegal. [1665.467244] hisi_sas_v3_hw 0000:b4:02.0: \u00a1no se pudo iniciar debugfs! ... [1669.836708] No se puede manejar la desreferencia del puntero NULL del kernel en la direcci\u00f3n virtual 00000000000000a0 [1669.872669] pc: down_write+0x24/0x70 [1669.876315] lr: down_write+0x1c/0x70 [1669.879961] sp: ffff000036f53a30 [ 1669.883260] x29: ffff000036f53a30 x28 : ffffa027c31549f8 [ 1669.888547] x27: ffffa027c3140000 x26: 0000000000000000 [ 1669.893834] x25: ffffa027bf37c270 x24: ffffa027bf37c270 [ 166 9.899122] x23: ffff0000095406b8 x22: ffff0000095406a8 [ 1669.904408] x21: 00000000000000000 x20: ffffa027bf37c310 [ 1669.909695] x19: 000000000a0 x18: ffff8027dcd86f10 [1669.914982] x17: 0000000000000000 x16: 0000000000000000 [ 1669.920268] x15: 0000000000000000 x14: ffffa0274014f870 [ 1669.925555] x13: 000000000 0000040 x12: 0000000000000228 [1669.930842] x11: 0000000000000020 x10: 0000000000000bb0 [1669.936129] x9: ffff000036f537f0 x8: 73088ca10 [1669.941416] x7: 000000000000001d x6: 00000000ffffffff [ 1669.946702] x5 : ffff000008a36310 x4 : ffff80273088be00 [ 1669.951989 ] x3 : ffff000009513e90 x2 : 0000000000000000 [ 1669.95 7276] x1: 00000000000000a0 x0: ffffffff00000001 [1669.962563] Seguimiento de llamadas: [1669.965000] down_write+0x24/0x70 [1669.968301] debugfs_remove_recursive+0x5c/0x1b0 [ 1669.972905] hisi_sas_debugfs_exit+0x24/0x30 [hisi_sas_main] [ 1669.978541] hisi_sas_v3_remove+0x130/0x150 [hisi_sas_v3_hw] [ 1669.984175] pci_device_remove+0x48/0 xd8 [ 1669.988082] device_release_driver_internal+0x1b4/0x250 [ 1669.993282] device_release_driver+0x28/0x38 [ 1669.997534] pci_stop_bus_device +0x84/0xb8 [ 1670.001611] pci_stop_and_remove_bus_device_locked+0x24/0x40 [ 1670.007244] remove_store+0xfc/0x140 [ 1670.010802] dev_attr_store+0x44/0x60 [ 1670.01444 8] sysfs_kf_write+0x58/0x80 [ 1670.018095] kernfs_fop_write+0xe8/0x1f0 [ 1670.022000] __vfs_write+0x60 /0x190 [ 1670.025472] vfs_write+0xac/0x1c0 [ 1670.028771] ksys_write+0x6c/0xd8 [ 1670.032071] __arm64_sys_write+0x24/0x30 [ 1670.035977] +0x78/0x130 [ 1670.039710] el0_svc_handler+0x38/0x78 [ 1670.043442] el0_svc+0x8/0xc Para solucionar este problema, establezca debugfs_dir en NULL despu\u00e9s de debugfs_remove_recursive().\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/scsi/hisi_sas/hisi_sas_v3_hw.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"47caad1577cd7a39e2048c5e4edbce4b863dc12b\",\"lessThan\":\"f0bfc8a5561fb0b2c48183dcbfe00bdd6d973bd3\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"47caad1577cd7a39e2048c5e4edbce4b863dc12b\",\"lessThan\":\"33331b265aac9441ac0c1a5442e3f05d038240ec\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"47caad1577cd7a39e2048c5e4edbce4b863dc12b\",\"lessThan\":\"75a2656260fe8c7eeabda6ff4600b29e183f48db\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"47caad1577cd7a39e2048c5e4edbce4b863dc12b\",\"lessThan\":\"b4465009e7d60c6111946db4c8f1e50d401ed7be\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"47caad1577cd7a39e2048c5e4edbce4b863dc12b\",\"lessThan\":\"6de426f9276c448e2db7238911c97fb157cb23be\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/scsi/hisi_sas/hisi_sas_v3_hw.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"4.5\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"4.5\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.140\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.64\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.5.13\",\"lessThanOrEqual\":\"6.5.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.3\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.7\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2024-05-22T19:30:55.612970Z\",\"id\":\"CVE-2023-52808\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-476\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.5\",\"versionEndExcluding\":\"5.15.140\",\"matchCriteriaId\":\"A6AD9671-6A65-4278-8C84-CB6EF1D0FFA7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.64\",\"matchCriteriaId\":\"8D7C884A-CAA2-4EA2-9FEB-5CE776D7B05F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.5.13\",\"matchCriteriaId\":\"674C4F82-C336-4B49-BF64-1DE422E889C4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.6\",\"versionEndExcluding\":\"6.6.3\",\"matchCriteriaId\":\"B58252FA-A49C-411F-9B28-DC5FE44BC5A0\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/33331b265aac9441ac0c1a5442e3f05d038240ec\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/6de426f9276c448e2db7238911c97fb157cb23be\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/75a2656260fe8c7eeabda6ff4600b29e183f48db\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/b4465009e7d60c6111946db4c8f1e50d401ed7be\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/f0bfc8a5561fb0b2c48183dcbfe00bdd6d973bd3\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/33331b265aac9441ac0c1a5442e3f05d038240ec\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/6de426f9276c448e2db7238911c97fb157cb23be\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/75a2656260fe8c7eeabda6ff4600b29e183f48db\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/b4465009e7d60c6111946db4c8f1e50d401ed7be\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/f0bfc8a5561fb0b2c48183dcbfe00bdd6d973bd3\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2025-11-21T14:02:29+00:00",
      "cve": "CVE-2023-52808",
      "id": "CVE-2023-52808",
      "initial_release_date": "2023-01-01T00:00:00+00:00",
      "product_status:known_affected": "156",
      "product_status:known_not_affected": "42",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-52808.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-12T17:06:47Z",
      "cve": "CVE-2023-52808",
      "id": "CVE-2023-52808",
      "initial_release_date": "2024-05-29T10:00:01Z",
      "product_status:known_affected": "368",
      "product_status:known_not_affected": "235",
      "product_status:recommended": "750",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2023-52808",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2023-52808.json",
      "version": "103"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://git.kernel.org/stable/c/f0bfc8a5561fb0b2c48183dcbfe00bdd6d973bd3\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/33331b265aac9441ac0c1a5442e3f05d038240ec\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/75a2656260fe8c7eeabda6ff4600b29e183f48db\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/b4465009e7d60c6111946db4c8f1e50d401ed7be\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/6de426f9276c448e2db7238911c97fb157cb23be\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-02T23:11:35.709Z\"}}, {\"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2023-52808\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-05-22T19:30:55.612970Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-05-22T19:31:00.784Z\"}, \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"title\": \"scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"47caad1577cd7a39e2048c5e4edbce4b863dc12b\", \"lessThan\": \"f0bfc8a5561fb0b2c48183dcbfe00bdd6d973bd3\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"47caad1577cd7a39e2048c5e4edbce4b863dc12b\", \"lessThan\": \"33331b265aac9441ac0c1a5442e3f05d038240ec\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"47caad1577cd7a39e2048c5e4edbce4b863dc12b\", \"lessThan\": \"75a2656260fe8c7eeabda6ff4600b29e183f48db\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"47caad1577cd7a39e2048c5e4edbce4b863dc12b\", \"lessThan\": \"b4465009e7d60c6111946db4c8f1e50d401ed7be\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"47caad1577cd7a39e2048c5e4edbce4b863dc12b\", \"lessThan\": \"6de426f9276c448e2db7238911c97fb157cb23be\", \"versionType\": \"git\"}], \"programFiles\": [\"drivers/scsi/hisi_sas/hisi_sas_v3_hw.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.5\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"4.5\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"5.15.140\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.15.*\"}, {\"status\": \"unaffected\", \"version\": \"6.1.64\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.1.*\"}, {\"status\": \"unaffected\", \"version\": \"6.5.13\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.5.*\"}, {\"status\": \"unaffected\", \"version\": \"6.6.3\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.6.*\"}, {\"status\": \"unaffected\", \"version\": \"6.7\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"drivers/scsi/hisi_sas/hisi_sas_v3_hw.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/f0bfc8a5561fb0b2c48183dcbfe00bdd6d973bd3\"}, {\"url\": \"https://git.kernel.org/stable/c/33331b265aac9441ac0c1a5442e3f05d038240ec\"}, {\"url\": \"https://git.kernel.org/stable/c/75a2656260fe8c7eeabda6ff4600b29e183f48db\"}, {\"url\": \"https://git.kernel.org/stable/c/b4465009e7d60c6111946db4c8f1e50d401ed7be\"}, {\"url\": \"https://git.kernel.org/stable/c/6de426f9276c448e2db7238911c97fb157cb23be\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nscsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs\\n\\nIf init debugfs failed during device registration due to memory allocation\\nfailure, debugfs_remove_recursive() is called, after which debugfs_dir is\\nnot set to NULL. debugfs_remove_recursive() will be called again during\\ndevice removal. As a result, illegal pointer is accessed.\\n\\n[ 1665.467244] hisi_sas_v3_hw 0000:b4:02.0: failed to init debugfs!\\n...\\n[ 1669.836708] Unable to handle kernel NULL pointer dereference at virtual address 00000000000000a0\\n[ 1669.872669] pc : down_write+0x24/0x70\\n[ 1669.876315] lr : down_write+0x1c/0x70\\n[ 1669.879961] sp : ffff000036f53a30\\n[ 1669.883260] x29: ffff000036f53a30 x28: ffffa027c31549f8\\n[ 1669.888547] x27: ffffa027c3140000 x26: 0000000000000000\\n[ 1669.893834] x25: ffffa027bf37c270 x24: ffffa027bf37c270\\n[ 1669.899122] x23: ffff0000095406b8 x22: ffff0000095406a8\\n[ 1669.904408] x21: 0000000000000000 x20: ffffa027bf37c310\\n[ 1669.909695] x19: 00000000000000a0 x18: ffff8027dcd86f10\\n[ 1669.914982] x17: 0000000000000000 x16: 0000000000000000\\n[ 1669.920268] x15: 0000000000000000 x14: ffffa0274014f870\\n[ 1669.925555] x13: 0000000000000040 x12: 0000000000000228\\n[ 1669.930842] x11: 0000000000000020 x10: 0000000000000bb0\\n[ 1669.936129] x9 : ffff000036f537f0 x8 : ffff80273088ca10\\n[ 1669.941416] x7 : 000000000000001d x6 : 00000000ffffffff\\n[ 1669.946702] x5 : ffff000008a36310 x4 : ffff80273088be00\\n[ 1669.951989] x3 : ffff000009513e90 x2 : 0000000000000000\\n[ 1669.957276] x1 : 00000000000000a0 x0 : ffffffff00000001\\n[ 1669.962563] Call trace:\\n[ 1669.965000]  down_write+0x24/0x70\\n[ 1669.968301]  debugfs_remove_recursive+0x5c/0x1b0\\n[ 1669.972905]  hisi_sas_debugfs_exit+0x24/0x30 [hisi_sas_main]\\n[ 1669.978541]  hisi_sas_v3_remove+0x130/0x150 [hisi_sas_v3_hw]\\n[ 1669.984175]  pci_device_remove+0x48/0xd8\\n[ 1669.988082]  device_release_driver_internal+0x1b4/0x250\\n[ 1669.993282]  device_release_driver+0x28/0x38\\n[ 1669.997534]  pci_stop_bus_device+0x84/0xb8\\n[ 1670.001611]  pci_stop_and_remove_bus_device_locked+0x24/0x40\\n[ 1670.007244]  remove_store+0xfc/0x140\\n[ 1670.010802]  dev_attr_store+0x44/0x60\\n[ 1670.014448]  sysfs_kf_write+0x58/0x80\\n[ 1670.018095]  kernfs_fop_write+0xe8/0x1f0\\n[ 1670.022000]  __vfs_write+0x60/0x190\\n[ 1670.025472]  vfs_write+0xac/0x1c0\\n[ 1670.028771]  ksys_write+0x6c/0xd8\\n[ 1670.032071]  __arm64_sys_write+0x24/0x30\\n[ 1670.035977]  el0_svc_common+0x78/0x130\\n[ 1670.039710]  el0_svc_handler+0x38/0x78\\n[ 1670.043442]  el0_svc+0x8/0xc\\n\\nTo fix this, set debugfs_dir to NULL after debugfs_remove_recursive().\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.15.140\", \"versionStartIncluding\": \"4.5\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.64\", \"versionStartIncluding\": \"4.5\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.5.13\", \"versionStartIncluding\": \"4.5\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.6.3\", \"versionStartIncluding\": \"4.5\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.7\", \"versionStartIncluding\": \"4.5\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2026-05-11T19:33:30.737Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2023-52808\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-05-11T19:33:30.737Z\", \"dateReserved\": \"2024-05-21T15:19:24.248Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-05-21T15:31:18.330Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.