Lucene search

LinuxVULNRICHMENT:CVE-2023-52467

HistoryFeb 25, 2024 - 8:16 a.m.

CVE-2023-52467 mfd: syscon: Fix null pointer dereference in of_syscon_register()

2024-02-2508:16:31

Linux

github.com

linux kernel

vulnerability

mfd

syscon

kasprintf

dynamically allocated memory

null

failure

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

In the Linux kernel, the following vulnerability has been resolved:

mfd: syscon: Fix null pointer dereference in of_syscon_register()

kasprintf() returns a pointer to dynamically allocated memory
which can be NULL upon failure.

References

git.kernel.org/stable/c/3ef1130deee98997275904d9bfc37af75e1e906c

git.kernel.org/stable/c/41673c66b3d0c09915698fec5c13b24336f18dd1

git.kernel.org/stable/c/527e8c5f3d00299822612c495d5adf1f8f43c001

git.kernel.org/stable/c/7f2c410ac470959b88e03dadd94b7a0b71df7973

git.kernel.org/stable/c/927626a2073887ee30ba00633260d4d203f8e875

git.kernel.org/stable/c/c3e3a2144bf50877551138ffce9f7aa6ddfe385b

lists.debian.org/debian-lts-announce/2024/06/msg00016.html