-

CVE-2023-54304

firmware: meson_sm: fix to avoid potential NULL pointer dereference

In the Linux kernel, the following vulnerability has been resolved:

firmware: meson_sm: fix to avoid potential NULL pointer dereference

of_match_device() may fail and returns a NULL pointer.

Fix this by checking the return value of of_match_device.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
Produkt Linux
Default Statusunaffected
Version 525ae72d9f0b5cf027f1c78c84e41c90e86df026
Version < fba9c24c196310546f13c77ff66d0741155fa771
Status affected
Version 8cde3c2153e8f57be884c0e73f18bc4de150e870
Version < 9f4017cac70c04090dd4f672e755d6c875af67d8
Status affected
Version 8cde3c2153e8f57be884c0e73f18bc4de150e870
Version < 502dfc5875bab9ae5d6a2939146c2c5e5683be40
Status affected
Version 8cde3c2153e8f57be884c0e73f18bc4de150e870
Version < bd3a6b6d5dd863dbbe17985c7612159cf4533cad
Status affected
Version 8cde3c2153e8f57be884c0e73f18bc4de150e870
Version < 68f3209546b5083f8bffa46f7173cc05191eace1
Status affected
Version 8cde3c2153e8f57be884c0e73f18bc4de150e870
Version < 2d6c4a1a4e6678cb98dd57964f133a995ecc91c1
Status affected
Version 8cde3c2153e8f57be884c0e73f18bc4de150e870
Version < f2ed165619c16577c02b703a114a1f6b52026df4
Status affected
HerstellerLinux
Produkt Linux
Default Statusaffected
Version 5.5
Status affected
Version 0
Version < 5.5
Status unaffected
Version <= 5.10.*
Version 5.10.195
Status unaffected
Version <= 5.15.*
Version 5.15.132
Status unaffected
Version <= 6.1.*
Version 6.1.53
Status unaffected
Version <= 6.4.*
Version 6.4.16
Status unaffected
Version <= 6.5.*
Version 6.5.3
Status unaffected
Version <= *
Version 6.6
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.05% 0.144
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.