CVE-2023-54319
published 2025-12-30CVE-2023-54319: In the Linux kernel, the following vulnerability has been resolved: pinctrl: at91-pio4: check return value of devm_kasprintf() devm_kasprintf() returns a…
PriorityP421
EPSS
0.19%
8.7th percentile
In the Linux kernel, the following vulnerability has been resolved:
pinctrl: at91-pio4: check return value of devm_kasprintf()
devm_kasprintf() returns a pointer to dynamically allocated memory.
Pointer could be NULL in case allocation fails. Check pointer validity.
Identified with coccinelle (kmerr.cocci script).
Depends-on: 1c4e5c470a56 ("pinctrl: at91: use devm_kasprintf() to avoid potential leaks")
Depends-on: 5a8f9cf269e8 ("pinctrl: at91-pio4: use proper format specifier for unsigned int")
Affected
23 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.52-1 (bookworm) | linux 6.1.52-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 776180848b574c9c01217fa958f10843ffce584f < 8d788f2ba830d6d32499b198c526d577c590eedf | 8d788f2ba830d6d32499b198c526d577c590eedf |
| linux | linux | >= 776180848b574c9c01217fa958f10843ffce584f < 3e8ce1d5a1a9d758b359e5c426543957f35991f8 | 3e8ce1d5a1a9d758b359e5c426543957f35991f8 |
| linux | linux | >= 776180848b574c9c01217fa958f10843ffce584f < aa3932eb07392d626486428e2ffddc660658e22a | aa3932eb07392d626486428e2ffddc660658e22a |
| linux | linux | >= 776180848b574c9c01217fa958f10843ffce584f < f3c7b95c9991dab02e616fc251b6c3516e0bd0ac | f3c7b95c9991dab02e616fc251b6c3516e0bd0ac |
| linux | linux | >= 776180848b574c9c01217fa958f10843ffce584f < 0a95dd17a73b7603818ad7c46c99d757232be331 | 0a95dd17a73b7603818ad7c46c99d757232be331 |
| linux | linux | >= 776180848b574c9c01217fa958f10843ffce584f < 0af388fce352ed2ab383fd5d1a08db551ca15c38 | 0af388fce352ed2ab383fd5d1a08db551ca15c38 |
| linux | linux | >= 776180848b574c9c01217fa958f10843ffce584f < 5bfd577cc728270d6cd7af6c652a1e7661f25487 | 5bfd577cc728270d6cd7af6c652a1e7661f25487 |
| linux | linux | >= 776180848b574c9c01217fa958f10843ffce584f < 8a1fa202f47f39680a4305af744f499a324f8a03 | 8a1fa202f47f39680a4305af744f499a324f8a03 |
| linux | linux | >= 776180848b574c9c01217fa958f10843ffce584f < f6fd5d4ff8ca0b24cee1af4130bcb1fa96b61aa0 | f6fd5d4ff8ca0b24cee1af4130bcb1fa96b61aa0 |
| linux | linux_kernel | >= 0 < 5.10.191-1 | 5.10.191-1 |
| linux | linux_kernel | >= 0 < 6.1.52-1 | 6.1.52-1 |
| linux | linux_kernel | >= 0 < 6.4.4-1 | 6.4.4-1 |
| linux | linux_kernel | >= 0 < 6.4.4-1 | 6.4.4-1 |
| linux | linux_kernel | >= 4.15.0 < 4.19.291 | 4.19.291 |
| linux | linux_kernel | >= 4.20.0 < 5.4.251 | 5.4.251 |
| linux | linux_kernel | >= 4.4.0 < 4.14.322 | 4.14.322 |
| linux | linux_kernel | >= 5.11.0 < 5.15.121 | 5.15.121 |
| linux | linux_kernel | >= 5.16.0 < 6.1.39 | 6.1.39 |
| linux | linux_kernel | >= 5.5.0 < 5.10.188 | 5.10.188 |
| linux | linux_kernel | >= 6.2.0 < 6.3.13 | 6.3.13 |
| linux | linux_kernel | >= 6.4.0 < 6.4.4 | 6.4.4 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: pinctrl: at91-pio4: check return value of devm_kasprintf()
vendor_redhat·2025-12-30
CVE-2023-54319 kernel: pinctrl: at91-pio4: check return value of devm_kasprintf()
kernel: pinctrl: at91-pio4: check return value of devm_kasprintf()
In the Linux kernel, the following vulnerability has been resolved:
pinctrl: at91-pio4: check return value of devm_kasprintf()
devm_kasprintf() returns a pointer to dynamically allocated memory.
Pointer could be NULL in case allocation fails. Check pointer validity.
Identified with coccinelle (kmerr.cocci script).
Depends-on: 1c4e5c470a56 ("pinctrl: at91: use devm_kasprintf() to avoid potential leaks")
Depends-on: 5a8f9cf269e8 ("pinctrl: at91-pio4: use proper format specifier for unsigned int")
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7)
Debian
CVE-2023-54319: linux - In the Linux kernel, the following vulnerability has been resolved: pinctrl: at...
vendor_debian·2023
CVE-2023-54319 CVE-2023-54319: linux - In the Linux kernel, the following vulnerability has been resolved: pinctrl: at...
In the Linux kernel, the following vulnerability has been resolved: pinctrl: at91-pio4: check return value of devm_kasprintf() devm_kasprintf() returns a pointer to dynamically allocated memory. Pointer could be NULL in case allocation fails. Check pointer validity. Identified with coccinelle (kmerr.cocci script). Depends-on: 1c4e5c470a56 ("pinctrl: at91: use devm_kasprintf() to avoid potential leaks") Depends-on: 5a8f9cf269e8 ("pinctrl: at91-pio4: use proper format specifier for unsigned int")
Scope: local
bookworm: resolved (fixed in 6.1.52-1)
bullseye: resolved (fixed in 5.10.191-1)
forky: resolved (fixed in 6.4.4-1)
sid: resolved (fixed in 6.4.4-1)
trixie: resolved (fixed in 6.4.4-1)
OSV
pinctrl: at91-pio4: check return value of devm_kasprintf()
osv·2025-12-30
CVE-2023-54319 pinctrl: at91-pio4: check return value of devm_kasprintf()
pinctrl: at91-pio4: check return value of devm_kasprintf()
In the Linux kernel, the following vulnerability has been resolved:
pinctrl: at91-pio4: check return value of devm_kasprintf()
devm_kasprintf() returns a pointer to dynamically allocated memory.
Pointer could be NULL in case allocation fails. Check pointer validity.
Identified with coccinelle (kmerr.cocci script).
Depends-on: 1c4e5c470a56 ("pinctrl: at91: use devm_kasprintf() to avoid potential leaks")
Depends-on: 5a8f9cf269e8 ("pinctrl: at91-pio4: use proper format specifier for unsigned int")
OSV
CVE-2023-54319: In the Linux kernel, the following vulnerability has been resolved: pinctrl: at91-pio4: check return value of devm_kasprintf() devm_kasprintf() return
osv·2025-12-30
CVE-2023-54319 CVE-2023-54319: In the Linux kernel, the following vulnerability has been resolved: pinctrl: at91-pio4: check return value of devm_kasprintf() devm_kasprintf() return
In the Linux kernel, the following vulnerability has been resolved: pinctrl: at91-pio4: check return value of devm_kasprintf() devm_kasprintf() returns a pointer to dynamically allocated memory. Pointer could be NULL in case allocation fails. Check pointer validity. Identified with coccinelle (kmerr.cocci script). Depends-on: 1c4e5c470a56 ("pinctrl: at91: use devm_kasprintf() to avoid potential leaks") Depends-on: 5a8f9cf269e8 ("pinctrl: at91-pio4: use proper format specifier for unsigned int")
GHSA
GHSA-2jx2-7jpf-5pr4: In the Linux kernel, the following vulnerability has been resolved:
pinctrl: at91-pio4: check return value of devm_kasprintf()
devm_kasprintf() retu
ghsa_unreviewed·2025-12-30
CVE-2023-54319 GHSA-2jx2-7jpf-5pr4: In the Linux kernel, the following vulnerability has been resolved:
pinctrl: at91-pio4: check return value of devm_kasprintf()
devm_kasprintf() retu
In the Linux kernel, the following vulnerability has been resolved:
pinctrl: at91-pio4: check return value of devm_kasprintf()
devm_kasprintf() returns a pointer to dynamically allocated memory.
Pointer could be NULL in case allocation fails. Check pointer validity.
Identified with coccinelle (kmerr.cocci script).
Depends-on: 1c4e5c470a56 ("pinctrl: at91: use devm_kasprintf() to avoid potential leaks")
Depends-on: 5a8f9cf269e8 ("pinctrl: at91-pio4: use proper format specifier for unsigned int")
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2023-54319 kernel: pinctrl: at91-pio4: check return value of devm_kasprintf()
bugzilla·2025-12-30
CVE-2023-54319 CVE-2023-54319 kernel: pinctrl: at91-pio4: check return value of devm_kasprintf()
CVE-2023-54319 kernel: pinctrl: at91-pio4: check return value of devm_kasprintf()
In the Linux kernel, the following vulnerability has been resolved:
pinctrl: at91-pio4: check return value of devm_kasprintf()
devm_kasprintf() returns a pointer to dynamically allocated memory.
Pointer could be NULL in case allocation fails. Check pointer validity.
Identified with coccinelle (kmerr.cocci script).
Depends-on: 1c4e5c470a56 ("pinctrl: at91: use devm_kasprintf() to avoid potential leaks")
Depends-on: 5a8f9cf269e8 ("pinctrl: at91-pio4: use proper format specifier for unsigned int")
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025123021-CVE-2023-54319-dd46@gregkh/T
Wiz
CVE-2023-54319 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz
CVE-2023-54319 CVE-2023-54319 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2023-54319 :
Linux Kernel vulnerability analysis and mitigation
In the Linux kernel, the following vulnerability has been resolved:
pinctrl: at91-pio4: check return value of devm_kasprintf()
devm_kasprintf() returns a pointer to dynamically allocated memory.
Pointer could be NULL in case allocation fails. Check pointer validity.
Identified with coccinelle (kmerr.cocci script).
Depends-on: 1c4e5c470a56 ("pinctrl: at91: use devm_kasprintf() to avoid potential leaks")
Depends-on: 5a8f9cf269e8 ("pinctrl: at91-pio4: use proper format specifier for unsigned int")
Source : NVD
Published December 30, 2025
CNA Score N/A
Affected Technologies
Linux Kernel
Linux Debian
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Pro
https://git.kernel.org/stable/c/0a95dd17a73b7603818ad7c46c99d757232be331https://git.kernel.org/stable/c/0af388fce352ed2ab383fd5d1a08db551ca15c38https://git.kernel.org/stable/c/3e8ce1d5a1a9d758b359e5c426543957f35991f8https://git.kernel.org/stable/c/5bfd577cc728270d6cd7af6c652a1e7661f25487https://git.kernel.org/stable/c/8a1fa202f47f39680a4305af744f499a324f8a03https://git.kernel.org/stable/c/8d788f2ba830d6d32499b198c526d577c590eedfhttps://git.kernel.org/stable/c/aa3932eb07392d626486428e2ffddc660658e22ahttps://git.kernel.org/stable/c/f3c7b95c9991dab02e616fc251b6c3516e0bd0achttps://git.kernel.org/stable/c/f6fd5d4ff8ca0b24cee1af4130bcb1fa96b61aa0
2025-12-30
Published