CVE-2023-54304

Awaiting Analysis Awaiting Analysis - Queue

BaseFortify

Publication date: 2025-12-30

Last updated on: 2025-12-31

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: firmware: meson_sm: fix to avoid potential NULL pointer dereference of_match_device() may fail and returns a NULL pointer. Fix this by checking the return value of of_match_device.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-12-30

Last Modified

2025-12-31

Generated

2026-07-06

AI Q&A

2025-12-30

EPSS Evaluated

2026-07-05

NVD

CVE-2023-54304

EUVD

EUVD-2023-60500

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is a potential NULL pointer dereference in the Linux kernel's meson_sm firmware component. It occurs because the function of_match_device() may fail and return a NULL pointer, which was not properly checked before use. The fix involves adding a check for the return value of of_match_device to avoid dereferencing a NULL pointer.

Impact Analysis

A NULL pointer dereference can cause the affected system to crash or behave unpredictably, potentially leading to denial of service or system instability.

Mitigation Strategies

Apply the patch or update to a Linux kernel version that includes the fix for the meson_sm firmware NULL pointer dereference vulnerability, which involves checking the return value of of_match_device to avoid NULL pointer dereference.

Hi! I’m here to help you understand CVE-2023-54304. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70