CVE-2023-54010

What it actually does

Null pointer dereference in ACPICA debug code when ACPI_ALLOCATE_ZEROED returns null for object_info in acpi_db_display_objects, causing crash on subsequent access.

Why it matters to the business

Kernel instability or panics during ACPI diagnostic operations under memory pressure, disrupting debugging, diagnostics, or affected systems running vulnerable kernels.

How an attack unfolds

An attacker with local access triggers the ACPI object display debug path while forcing allocation failure, resulting in null dereference and potential denial of service.

How to fix it

Upgrade Linux kernel to commit c9fcb2cfcbd4d7018d9f659f5b670f5b727d1968 or later; upgrade delve packages to 1.24.2-r1.

How to confirm the fix worked

Verify kernel source includes the null-check fix after ACPI_ALLOCATE_ZEROED; test allocation failure paths in acpi_db_display_objects.

Typical attack path

1. Obtain local system access
2. Invoke ACPI debug object display functions
3. Induce memory allocation failure for the required structure

How to detect it

Review kernel panic and oops logs for references to acpi_db_display_objects or ACPICA allocation failures; correlate with low-memory conditions.

What your security team should do

• Prioritize kernel updates on all affected systems
• Restrict access to ACPI debug interfaces where possible
• Monitor kernel logs for related null dereference oops