CVE-2023-54279 — Linux vulnerability
7 documents6 sources
Severity
5.3MEDIUM
No vectorEPSS
0.0%
top 84.94%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 30
Description
In the Linux kernel, the following vulnerability has been resolved:
MIPS: fw: Allow firmware to pass a empty env
fw_getenv will use env entry to determine style of env,
however it is legal for firmware to just pass a empty list.
Check if first entry exist before running strchr to avoid
null pointer dereference.
Affected Packages4 packages
▶CVEListV5linux/linux14aecdd419217e041fb5dd2749d11f58503bdf62 — f334b31625683418aaa2a335470eec950a95a254+9
🔴Vulnerability Details
3GHSA▶
GHSA-fp2g-4w3c-p2mv: In the Linux kernel, the following vulnerability has been resolved:
MIPS: fw: Allow firmware to pass a empty env
fw_getenv will use env entry to det↗2025-12-30
OSV▶
CVE-2023-54279: In the Linux kernel, the following vulnerability has been resolved: MIPS: fw: Allow firmware to pass a empty env fw_getenv will use env entry to deter↗2025-12-30