FlawAtlas
Search the atlas
CVE-2023-22997 Moderate

CVE-2023-22997

In the Linux kernel before 6.1.2, kernel/module/decompress.c misinterprets the module_get_next_page return value (expects it to be NULL in the error case, whereas it is actually an error pointer).

Exploit probability 0.3%
Published February 28, 2023
Required by Not available
Last source change March 14, 2026

02 / AFFECTED SOFTWARE

Affected packages

Unknown Unknown

04 / EVIDENCE

Source records

Open Source Vulnerabilities CVE-2023-22997

In the Linux kernel before 6.1.2, kernel/module/decompress.c misinterprets the module_get_next_page return value (expects it to be NULL in the error case, whereas it is actually an error pointer).

View original source

05 / REFERENCES

Further evidence