CVE-2023-53681

low-risk
Published 2025-10-07

In the Linux kernel, the following vulnerability has been resolved: bcache: Fix __bch_btree_node_alloc to make the failure behavior consistent In some specific situations, the return value of __bch_btree_node_alloc may be NULL. This may lead to a potential NULL pointer dereference in caller function like a calling chain : btree_split->bch_btree_node_alloc->__bch_btree_node_alloc. Fix it by initializing the return value in __bch_btree_node_alloc.

Do I need to act?

-
0.01% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
5
CVSS 5.5/10 Medium
LOCAL / LOW complexity

Affected Products (1)

Affected Vendors

Linux

References (7)

Patch https://git.kernel.org/stable/c/4514847aee18d9391a0cf3aad75d3567c72795a4
Patch https://git.kernel.org/stable/c/587b4e8bb5dac682f09280ab35db4632b29d5ac4
Patch https://git.kernel.org/stable/c/7ecea5ce3dc17339c280c75b58ac93d8c8620d9f
Patch https://git.kernel.org/stable/c/80fca8a10b604afad6c14213fdfd816c4eda3ee4
Patch https://git.kernel.org/stable/c/a4405f6ee03323410d7b10966fd67b35f71b1944
Patch https://git.kernel.org/stable/c/b070f29a61436f6f8a2e3abc7ea4f4be81695198
Patch https://git.kernel.org/stable/c/f67b0e3081f2a24170280a33ac66f6b112083c03
23
/ 100
low-risk
Severity 18/34 · Moderate
Exploitability 0/34 · Minimal
Exposure 5/34 · Minimal