High 7.5Published Dec 8, 2025

CVE-2023-53817crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui()

Updated under an hour ago (Oct 27, 2026, 4:23 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() During NVMeTCP Authentication a controller can trigger a kernel oops by specifying the 8192 bit Diffie Hellman group and passing a correctly sized, but zeroed Diffie Hellamn value. mpi_cmp_ui() was detecting this if the second parameter was 0, but 1 is passed from dh_is_pubkey_valid(). This causes the null pointer u->d to be dereferenced towards the end of mpi_cmp_ui()

CVSS: 7.5 HIGH (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: Aug 5, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 12f008b6dc5ff1c822fdb2198d20e3dbdc92f3f5 before fde791e8a96a64ea7b0ad2440e43586447a209c6; from 12f008b6dc5ff1c822fdb2198d20e3dbdc92f3f5 before ae63e84ffda74267bf7277c38415ba38389229a0; from 12f008b6dc5ff1c822fdb2198d20e3dbdc92f3f5 before 61f5453e9706e99713825594e0c8f9031485fb5f; 12f008b6dc5ff1c822fdb2198d20e3dbdc92f3f5 builds before 0fc7147c694394f8a8cbc19570c6bc918cac0906; from 12f008b6dc5ff1c822fdb2198d20e3dbdc92f3f5 before 67589d247909043e94d2dd5fb590958e0f99d58d; from 12f008b6dc5ff1c822fdb2198d20e3dbdc92f3f5 before d3ad023a39f1127dcfd331c562673355dc078650; 12f008b6dc5ff1c822fdb2198d20e3dbdc92f3f5 builds before 12ac013ad7ff0df066451e825801d805095b3776; 12f008b6dc5ff1c822fdb2198d20e3dbdc92f3f5 builds before 9e47a758b70167c9301d2b44d2569f86c7796f2d	CNA record

References

References

https://git.kernel.org/stable/c/fde791e8a96a64ea7b0ad2440e43586447a209c6
https://git.kernel.org/stable/c/ae63e84ffda74267bf7277c38415ba38389229a0
https://git.kernel.org/stable/c/61f5453e9706e99713825594e0c8f9031485fb5f
https://git.kernel.org/stable/c/0fc7147c694394f8a8cbc19570c6bc918cac0906
https://git.kernel.org/stable/c/67589d247909043e94d2dd5fb590958e0f99d58d
https://git.kernel.org/stable/c/d3ad023a39f1127dcfd331c562673355dc078650
https://git.kernel.org/stable/c/12ac013ad7ff0df066451e825801d805095b3776
https://git.kernel.org/stable/c/9e47a758b70167c9301d2b44d2569f86c7796f2d

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.