CVE-2023-54319
Unknown Unknown - Not Provided
Null Pointer Dereference in Linux Kernel at91-pio4 pinctrl

Publication date: 2025-12-30

Last updated on: 2025-12-30

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: pinctrl: at91-pio4: check return value of devm_kasprintf() devm_kasprintf() returns a pointer to dynamically allocated memory. Pointer could be NULL in case allocation fails. Check pointer validity. Identified with coccinelle (kmerr.cocci script). Depends-on: 1c4e5c470a56 ("pinctrl: at91: use devm_kasprintf() to avoid potential leaks") Depends-on: 5a8f9cf269e8 ("pinctrl: at91-pio4: use proper format specifier for unsigned int")
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-12-30
Last Modified
2025-12-30
Generated
2026-06-16
AI Q&A
2025-12-30
EPSS Evaluated
2026-06-15
NVD
CVE-2023-54319
EUVD
EUVD-2023-60485
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
linux kernel *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability involves the Linux kernel's pinctrl at91-pio4 driver not properly checking the return value of the devm_kasprintf() function. devm_kasprintf() allocates memory dynamically and can return NULL if the allocation fails. The vulnerability is that the code did not verify whether the pointer returned was NULL, which could lead to issues such as dereferencing a NULL pointer.

Impact Analysis

If the pointer returned by devm_kasprintf() is NULL and not checked, it could lead to kernel errors such as crashes or undefined behavior due to dereferencing a NULL pointer. This can affect system stability and reliability.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2023-54319. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart