CVE-2023-54304
BaseFortify
Publication date: 2025-12-30
Last updated on: 2025-12-31
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a potential NULL pointer dereference in the Linux kernel's meson_sm firmware component. It occurs because the function of_match_device() may fail and return a NULL pointer, which was not properly checked before use. The fix involves adding a check for the return value of of_match_device to avoid dereferencing a NULL pointer.
How can this vulnerability impact me? :
A NULL pointer dereference can cause the affected system to crash or behave unpredictably, potentially leading to denial of service or system instability.
What immediate steps should I take to mitigate this vulnerability?
Apply the patch or update to a Linux kernel version that includes the fix for the meson_sm firmware NULL pointer dereference vulnerability, which involves checking the return value of of_match_device to avoid NULL pointer dereference.