CVE-2023-53834: 
Linux Kernel vulnerability analysis and mitigation

CVE-2023-53834 is a NULL pointer dereference vulnerability in the Linux kernel's IIO ADC ina2xx driver. It occurs when a device tree specifies multiple compatible strings (e.g., ti,ina232 followed by ti,ina231) and the first string is not recognized by the driver's legacy I2C device ID table, causing the i2c_device_id *id pointer in the probe function to be NULL. The vulnerability was published on December 9, 2025, and affects Linux kernel versions from 4.5 up to the patched stable releases. The CVSS category is estimated as Medium, with an EPSS score of 0.00018 (Feedly, ENISA EUVD).

The root cause is a NULL pointer dereference (CWE-476) in the iio: adc: ina2xx driver's probe function. When Open Firmware (OF) device matching succeeds on a fallback compatible string (e.g., ti,ina231) but the modalias is populated from the first compatible string (ti,ina232) via of_i2c_get_board_info(), and that first string has no entry in the legacy I2C device ID table, the struct i2c_device_id *id pointer passed to the probe function is NULL. Any subsequent dereference of this pointer causes a kernel NULL pointer dereference. The fix uses the already-populated type variable (which correctly points to the driver data) instead of dereferencing the potentially NULL id pointer, and adds a generic name to the ina2xx_config table (Feedly, ENISA EUVD).

Exploitation of this vulnerability causes a kernel NULL pointer dereference, which typically results in a kernel panic or system crash, impacting availability. The vulnerability is triggered during device probe on systems where the device tree lists an unrecognized compatible string before a recognized one for ina2xx-family power monitor chips. There is no known confidentiality or integrity impact; the primary consequence is a denial of service (system crash) on affected embedded or server platforms using these INA2xx ADC devices (Feedly).

The vulnerability is fixed in Linux kernel stable releases 5.15.127, 6.1.46, 6.4.11, and 6.5. The fix involves modifying the ina2xx driver probe function to use the already-populated type variable rather than dereferencing the potentially NULL i2c_device_id *id pointer, and adding a generic name field to the ina2xx_config table. Users should update to a patched kernel version; SUSE has also released kernel updates addressing this issue (ENISA EUVD, Linux Security SUSE).