Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-54279

MIPS: fw: Allow firmware to pass a empty env

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: MIPS: fw: Allow firmware to pass a empty env fw_getenv will use env entry to determine style of env, however it is legal for firmware to just pass a empty list. Check if first entry exist before running strchr to avoid null pointer dereference.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 14aecdd419217e041fb5dd2749d11f58503bdf62 to < f334b31625683418aaa2a335470eec950a95a254affected
  • 14aecdd419217e041fb5dd2749d11f58503bdf62 to < 830181ddced5a05a711dc9da8043203b1f33a77eaffected
  • 14aecdd419217e041fb5dd2749d11f58503bdf62 to < 0f91290774c798199ba4b8df93de5c3156b5163daffected
  • 14aecdd419217e041fb5dd2749d11f58503bdf62 to < 47e61cadc7a5f3dffd42d2d6fda81be163f1ab82affected
  • 14aecdd419217e041fb5dd2749d11f58503bdf62 to < 3ef93b7bd9e042db240843f24a80e14da38c6830affected
  • 14aecdd419217e041fb5dd2749d11f58503bdf62 to < a6b54af407873227caef6262e992f5422cdcb6aeaffected
  • 14aecdd419217e041fb5dd2749d11f58503bdf62 to < ad79828f133e98585ab2236cad04a55eb7141bbeaffected
  • 14aecdd419217e041fb5dd2749d11f58503bdf62 to < aeed787bbbbe1b842beec9a065a36c915226f704affected
  • 14aecdd419217e041fb5dd2749d11f58503bdf62 to < ee1809ed7bc456a72dc8410b475b73021a3a68d5affected

Linux Linux

Default version status: affected

  • 3.10affected
  • 0 to < 3.10unaffected
  • 4.14.315 to ≤ 4.14.*unaffected
  • 4.19.283 to ≤ 4.19.*unaffected
  • 5.4.243 to ≤ 5.4.*unaffected
  • 5.10.180 to ≤ 5.10.*unaffected
  • 5.15.111 to ≤ 5.15.*unaffected
  • 6.1.28 to ≤ 6.1.*unaffected
  • 6.2.15 to ≤ 6.2.*unaffected
  • 6.3.2 to ≤ 6.3.*unaffected
  • 6.4 to ≤ *unaffected

References