CVE-2023-54189: In the Linux kernel, the following vulnerability has been resolved: pstore/ram: Add check for kstrdup Add check for the return value of kstrdup() and return…

PriorityP417low5.5

EPSS

0.18%

7.7th percentile

In the Linux kernel, the following vulnerability has been resolved: pstore/ram: Add check for kstrdup Add check for the return value of kstrdup() and return the error if it fails in order to avoid NULL pointer dereference.

Affected

20 ranges

Vendor	Product	Version range	Fixed in
debian	linux	< linux 6.1.52-1 (bookworm)	linux 6.1.52-1 (bookworm)
linux	linux	—	—
linux	linux	>= 5.4.12 < 5.4.251	5.4.251
linux	linux	>= c617a3b777b92a0e80ceff2dffaae9350d4c3850 < 8430a8e8e85420d4cb51dcb08b0278ab194ea82f	8430a8e8e85420d4cb51dcb08b0278ab194ea82f
linux	linux	>= e163fdb3f7f8c62dccf194f3f37a7bcb3c333aa8 < a14cb307267ba7a1715403e071bdc4deda77eef5	a14cb307267ba7a1715403e071bdc4deda77eef5
linux	linux	>= e163fdb3f7f8c62dccf194f3f37a7bcb3c333aa8 < 38a9d7dac3ad25323145b4aaea3b5f434f50011d	38a9d7dac3ad25323145b4aaea3b5f434f50011d
linux	linux	>= e163fdb3f7f8c62dccf194f3f37a7bcb3c333aa8 < f57ba91a46d3fc52bfdac9cca5cf5572ec7afd6d	f57ba91a46d3fc52bfdac9cca5cf5572ec7afd6d
linux	linux	>= e163fdb3f7f8c62dccf194f3f37a7bcb3c333aa8 < 2a764a2facd9dd88a69777200f65dfd0182765dc	2a764a2facd9dd88a69777200f65dfd0182765dc
linux	linux	>= e163fdb3f7f8c62dccf194f3f37a7bcb3c333aa8 < 065c81ae5817b245bb9feb6d54e027702740b49a	065c81ae5817b245bb9feb6d54e027702740b49a
linux	linux	>= e163fdb3f7f8c62dccf194f3f37a7bcb3c333aa8 < d97038d5ec2062733c1e016caf9baaf68cf64ea1	d97038d5ec2062733c1e016caf9baaf68cf64ea1
linux	linux_kernel	< 5.15.121	5.15.121
linux	linux_kernel	>= 0 < 5.10.191-1	5.10.191-1
linux	linux_kernel	>= 0 < 6.1.52-1	6.1.52-1
linux	linux_kernel	>= 0 < 6.4.4-1	6.4.4-1
linux	linux_kernel	>= 0 < 6.4.4-1	6.4.4-1
linux	linux_kernel	>= 0 < 5.4.251	5.4.251
linux	linux_kernel	>= 5.11.0 < 6.1.39	6.1.39
linux	linux_kernel	>= 5.16.0 < 6.3.13	6.3.13
linux	linux_kernel	>= 5.5.0 < 5.10.188	5.10.188
linux	linux_kernel	>= 6.2.0 < 6.4.4	6.4.4

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.