Menu

Star on GitHub · 3.2k

CVE-2023-53755

In the Linux kernel, the following vulnerability has been resolved: dmaengine: ptdma: check for null desc before calling pt_cmd_callback Resolves a panic that can occur on AMD systems, typically…

Published Dec 8, 2025EPSS 0.18%

Overview

CVE-2023-53755 is a known-severity vulnerability. It was published on December 8, 2025.

Technical description

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: ptdma: check for null desc before calling pt_cmd_callback

Resolves a panic that can occur on AMD systems, typically during host

shutdown, after the PTDMA driver had been exercised. The issue was

the pt_issue_pending() function is mistakenly assuming that there will

be at least one descriptor in the Submitted queue when the function

is called. However, it is possible that both the Submitted and Issued

queues could be empty, which could result in pt_cmd_callback() being

mistakenly called with a NULL pointer.

Ref: Bugzilla Bug 216856.

Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Frequently asked questions

What is CVE-2023-53755?

CVE-2023-53755 is a known-severity vulnerability. It was published on December 8, 2025.

How severe is CVE-2023-53755?

CVSS score information is not yet available for this vulnerability. Check back as the CVE record is updated by NVD analysts.

How do I fix or remediate CVE-2023-53755?

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

How can CyberStrike help with CVE-2023-53755?

CyberStrike is an open-source, AI-augmented pentesting engine. Rather than flag a version number, it tests whether an issue like CVE-2023-53755 is actually reachable in your own applications and APIs, then verifies each finding before reporting it. That tells you if the weakness is a real, exploitable risk in your environment or a false positive you can safely deprioritize.