CVE-2023-54058 — NULL Pointer Dereference in Linux
Severity
3.3LOW
No vectorEPSS
0.0%
top 92.73%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 24
Description
In the Linux kernel, the following vulnerability has been resolved:
firmware: arm_ffa: Check if ffa_driver remove is present before executing
Currently ffa_drv->remove() is called unconditionally from
ffa_device_remove(). Since the driver registration doesn't check for it
and allows it to be registered without .remove callback, we need to check
for the presence of it before executing it from ffa_device_remove() to
above a NULL pointer dereference like the one below:
| Unable to handle kernel …
Affected Packages4 packages
▶CVEListV5linux/linux244f5d597e1ea519c2085fbd9819458688775e42 — 6a26c62625c59b8dd7f52c518cb4f60a63470a0e+5
🔴Vulnerability Details
3OSV▶
CVE-2023-54058: In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Check if ffa_driver remove is present before executing Currentl↗2025-12-24
GHSA▶
GHSA-chjw-9fmq-6p9g: In the Linux kernel, the following vulnerability has been resolved:
firmware: arm_ffa: Check if ffa_driver remove is present before executing
Curren↗2025-12-24