Vulnerability in Linux

CVE-2023-54279

In the Linux kernel, the following vulnerability has been resolved: MIPS: fw: Allow firmware to pass a empty env fw_getenv will use env entry to determine style of env, however it is legal for firmware to just pass a empty list. Check if first entry exist before running strchr to avoid null pointer dereference.

EPSS: 0.002 (9.6th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions 14aecdd419217e041fb5dd2749d11f58503bdf62, 3.10, 0

References