HomeDefectsLIN1022-19836
Fixed

LIN1022-19836 : Security Advisory - linux - CVE-2023-53834

Created: Dec 10, 2025    Updated: Dec 11, 2025
Resolved Date: Dec 10, 2025
Found In Version: 10.22.33.1
Fix Version: 10.22.33.13
Severity: Standard
Applicable for: Wind River Linux LTS 22
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:[EOL][EOL]iio: adc: ina2xx: avoid NULL pointer dereference on OF device match[EOL][EOL]The affected lines were resulting in a NULL pointer dereference on our[EOL]platform because the device tree contained the following list of[EOL]compatible strings:[EOL][EOL]    power-sensor@40 {[EOL]        compatible = "ti,ina232", "ti,ina231";[EOL]        ...[EOL]    };[EOL][EOL]Since the driver doesn't declare a compatible string "ti,ina232", the OF[EOL]matching succeeds on "ti,ina231". But the I2C device ID info is[EOL]populated via the first compatible string, cf. modalias population in[EOL]of_i2c_get_board_info(). Since there is no "ina232" entry in the legacy[EOL]I2C device ID table either, the struct i2c_device_id *id pointer in the[EOL]probe function is NULL.[EOL][EOL]Fix this by using the already populated type variable instead, which[EOL]points to the proper driver data. Since the name is also wanted, add a[EOL]generic one to the ina2xx_config table.
Live chat
Online