CVE-2023-54189
NULL Pointer Dereference in Linux Kernel pstore/ram Component
Publication date: 2025-12-30
Last updated on: 2025-12-30
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability in the Linux kernel involves the pstore/ram component where the function kstrdup() was called without checking its return value. If kstrdup() fails and returns NULL, the lack of a check can lead to a NULL pointer dereference, which is a type of error that can cause the system to crash or behave unexpectedly. The fix adds a check for the return value of kstrdup() and returns an error if it fails, preventing the NULL pointer dereference.
How can this vulnerability impact me? :
This vulnerability can cause a NULL pointer dereference in the Linux kernel, potentially leading to system crashes or instability. This can affect system reliability and availability, possibly causing downtime or disruption of services running on affected Linux systems.