CVE-2023-53472
EUVD-2025-3282401.10.2025, 12:15
In the Linux kernel, the following vulnerability has been resolved: pwm: lpc32xx: Remove handling of PWM channels Because LPC32xx PWM controllers have only a single output which is registered as the only PWM device/channel per controller, it is known in advance that pwm->hwpwm value is always 0. On basis of this fact simplify the code by removing operations with pwm->hwpwm, there is no controls which require channel number as input. Even though I wasn't aware at the time when I forward ported that patch, this fixes a null pointer dereference as lpc32xx->chip.pwms is NULL before devm_pwmchip_add() is called.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| linux | linux_kernel | 4.9.284 ≤ 𝑥 < 4.10 |
| linux | linux_kernel | 4.14.248 ≤ 𝑥 < 4.14.326 |
| linux | linux_kernel | 4.19.208 ≤ 𝑥 < 4.19.295 |
| linux | linux_kernel | 5.4.149 ≤ 𝑥 < 5.4.257 |
| linux | linux_kernel | 5.10.69 ≤ 𝑥 < 5.10.195 |
| linux | linux_kernel | 5.14.8 ≤ 𝑥 < 5.15.132 |
| linux | linux_kernel | 5.16 ≤ 𝑥 < 6.1.54 |
| linux | linux_kernel | 6.2 ≤ 𝑥 < 6.5.4 |
𝑥
= Vulnerable software versions
Debian Releases
Common Weakness Enumeration
References