CVE-2023-54319
Null Pointer Dereference in Linux Kernel at91-pio4 pinctrl
Publication date: 2025-12-30
Last updated on: 2025-12-30
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | kernel | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability involves the Linux kernel's pinctrl at91-pio4 driver not properly checking the return value of the devm_kasprintf() function. devm_kasprintf() allocates memory dynamically and can return NULL if the allocation fails. The vulnerability is that the code did not verify whether the pointer returned was NULL, which could lead to issues such as dereferencing a NULL pointer.
How can this vulnerability impact me? :
If the pointer returned by devm_kasprintf() is NULL and not checked, it could lead to kernel errors such as crashes or undefined behavior due to dereferencing a NULL pointer. This can affect system stability and reliability.