CVE-2023-53242 thermal/drivers/hisi: Drop second sensor hi3660
A memory allocation error in the HiSilicon thermal driver causes a kernel panic, leading to denial of service on affected Linux systems.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2023-53242?
CVE-2023-53242 is a high-severity vulnerability in Linux kernel, published on 15 Sep 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
thermal/drivers/hisi: Drop second sensor hi3660
The commit 74c8e6bffbe1 ("driver core: Add __alloc_size hint to devm allocators") exposes a panic "BRK handler: Fatal exception" on the hi3660_thermal_probe funciton. This is because the function allocates memory for only one sensors array entry, but tries to fill up a second one.
Fix this by removing the unneeded second access.
Which versions are affected by CVE-2023-53242?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2023-53242?
Apply the vendor's patch.
Is CVE-2023-53242 being exploited?
There is no known exploitation of CVE-2023-53242 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2023-53242, DEBIAN-CVE-2023-53242, GHSA-rcjh-888g-5f4f, UBUNTU-CVE-2023-53242.