Linux Distros Unpatched Vulnerability : CVE-2023-54279

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MIPS: fw: Allow firmware to pass a empty env fwgetenv will use env entry to determine style of env, however it is legal for firmware to just pass a empty list...

CVE-2023-54279

CVE-2023-54279 concerns the Linux kernel MIPS fw handling when firmware passes an empty environment. The issue arises in fw_getenv, which uses an env entry to determine the style of env data; firmware may supply an empty list, risking a null pointer dereference if code path assumes a non-empty fi...