In the Linux kernel, the following vulnerability has been resolved:

ping: Fix potentail NULL deref for /proc/net/icmp.

After commit dbca1596bbb0 ("ping: convert to RCU lookups, get rid
of rwlock"), we use RCU for ping sockets, but we should use spinlock
for /proc/net/icmp to avoid a potential NULL deref mentioned in
the previous patch.

Let's go back to using spinlock there.

Note we can convert ping sockets to use hlist instead of hlist_nulls
because we do not use SLAB_TYPESAFE_BY_RCU for ping sockets.

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00024.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
dbca1596bbb08318f5e3b3b99f8ca0a0d3830a65 affected < 5a08a32e624908890aa0a2eb442bb6a7669891a8
dbca1596bbb08318f5e3b3b99f8ca0a0d3830a65 affected < 176cbb6da28f36506cc60a4bec4ab8df0c16713a
dbca1596bbb08318f5e3b3b99f8ca0a0d3830a65 affected < ab5fb73ffa01072b4d8031cc05801fa1cb653bee
de3d723a3985f282a8c9e468d1e198616eb291c8 affected —
Linux Linux affected
Version Status Constraints
6.0 affected —
0 unaffected < 6.0
6.1.24 unaffected ≤ 6.1.*
6.2.11 unaffected ≤ 6.2.*
6.3 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/176cbb6da28f36506cc60a4bec4ab8df0c16713a cve-icon cve-icon
https://git.kernel.org/stable/c/5a08a32e624908890aa0a2eb442bb6a7669891a8 cve-icon cve-icon
https://git.kernel.org/stable/c/ab5fb73ffa01072b4d8031cc05801fa1cb653bee cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025122422-CVE-2023-53987-9f08@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2023-53987 cve-icon
https://www.cve.org/CVERecord?id=CVE-2023-53987 cve-icon
History

Fri, 26 Dec 2025 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

threat_severity

Important

Wed, 24 Dec 2025 11:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: ping: Fix potentail NULL deref for /proc/net/icmp. After commit dbca1596bbb0 ("ping: convert to RCU lookups, get rid of rwlock"), we use RCU for ping sockets, but we should use spinlock for /proc/net/icmp to avoid a potential NULL deref mentioned in the previous patch. Let's go back to using spinlock there. Note we can convert ping sockets to use hlist instead of hlist_nulls because we do not use SLAB_TYPESAFE_BY_RCU for ping sockets.
Title ping: Fix potentail NULL deref for /proc/net/icmp.
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-12-24T10:55:27.032Z

Reserved: 2025-12-24T10:53:46.175Z

Link: CVE-2023-53987

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-12-24T11:15:51.597

Modified: 2025-12-29T15:58:56.260

Link: CVE-2023-53987

cve-icon Redhat

Severity : Important

Publid Date: 2025-12-24T00:00:00Z

Links: CVE-2023-53987 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.