CVE-2023-3355

MediumCVSS 4.7

Published: 28/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.27%

19th percentile - higher than 19% of all known CVEs

Summary

A NULL pointer dereference flaw exists in the Linux kernel's submit_lookup_cmds function due to a lack of check on the return value of kmalloc(). This issue allows a local user to crash the system.

Risk Assessment

A local user can exploit this vulnerability to crash the system, potentially leading to downtime and data loss.

Recommendation

It is recommended to update the Linux kernel to the latest version that includes fixes for this vulnerability.

Original NVD description (English source)

A NULL pointer dereference flaw was found in the Linux kernel's drivers/gpu/drm/msm/msm_gem_submit.c code in the submit_lookup_cmds function, which fails because it lacks a check of the return value of kmalloc(). This issue allows a local user to crash the system.