Vulnerability in Linux

CVE-2023-54178

In the Linux kernel, the following vulnerability has been resolved: of: unittest: fix null pointer dereferencing in of_unittest_find_node_by_name() when kmalloc() fail to allocate memory in kasprintf(), name or full_name will be NULL, strcmp() will cause null pointer dereference.

EPSS: 0.002 (9.6th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions 0d638a07d3a1e98a7598eb2812a6236324e4c55f, 4.14, 0

References