CVE-2023-52467

mfd: syscon: Fix null pointer dereference in of_syscon_register()

EPSS 0.3%

Vexday Risk Score

3Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS —EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

25 fev 2024Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

In the Linux kernel, the following vulnerability has been resolved: mfd: syscon: Fix null pointer dereference in of_syscon_register() kasprintf() returns a pointer to dynamically allocated memory which can be NULL upon failure.

Produtos afetados

Linux · Linux

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://git.kernel.org/stable/c/3ef1130deee98997275904d9bfc37af75e1e906c https://git.kernel.org/stable/c/41673c66b3d0c09915698fec5c13b24336f18dd1 https://git.kernel.org/stable/c/527e8c5f3d00299822612c495d5adf1f8f43c001 https://git.kernel.org/stable/c/7f2c410ac470959b88e03dadd94b7a0b71df7973 https://git.kernel.org/stable/c/927626a2073887ee30ba00633260d4d203f8e875 https://git.kernel.org/stable/c/c3e3a2144bf50877551138ffce9f7aa6ddfe385b https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html