Vulnerability in Linux

CVE-2023-54249

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: ep: Only send -ENOTCONN status if client driver is available For the STOP and RESET commands, only send the channel disconnect status -ENOTCONN if client driver is available. Otherwise, it will result in null pointer dereference.

EPSS: 0.002 (6.2th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions e827569062a804c67b51930ce83a4cb886113cb7, 5.19, 0

References