CVE-2023-53987: Linux

EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: ping: Fix potentail NULL deref for /proc/net/icmp. After commit dbca1596bbb0 ("ping: convert to RCU lookups, get rid of rwlock"), we use RCU for ping sockets, but we should use spinlock for /proc/net/icmp to avoid a potential NULL deref mentioned in the previous patch. Let's go back to using spinlock there. Note we can convert ping sockets to use hlist instead of hlist_nulls because we do not use SLAB_TYPESAFE_BY_RCU for ping sockets.

Affected products

• Linux Linux: from 5.19.2, before 5.20 (fixed in 5.20); from 6.0, before 6.1.24 (fixed in 6.1.24); from 6.2, before 6.2.11 (fixed in 6.2.11)

Published 2025-12-24. Last modified 2026-06-17.