CVE-2023-54087

Not scored yetLast modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ubi: Fix possible null-ptr-deref in ubi_free_volume()

It willl cause null-ptr-deref in the following case:

uif_init() ubi_add_volume() cdev_add() -> if it fails, call kill_volumes() device_register()

kill_volumes() -> if ubi_add_volume() fails call this function ubi_free_volume() cdev_del() device_unregister() -> trying to delete a not added device, it causes null-ptr-deref

So in ubi_free_volume(), it delete devices whether they are added or not, it will causes null-ptr-deref.

Handle the error case whlie calling ubi_add_volume() to fix this problem. If add volume fails, set the corresponding vol to null, so it can not be accessed in kill_volumes() and release the resource in ubi_add_volume() error path.

Metrics

No CVSS score has been published yet.

Affected software

VendorProductVersions
LinuxLinux>= 801c135ce73d5df1caf3eca35b66a10824ae0707, < 5558bcf1c58720ca6e9d6198d921cb3aa337f038; >= 801c135ce73d5df1caf3eca35b66a10824ae0707, < 45b2c5ca4d2edae70f19fdb086bd927840c4c309; >= 801c135ce73d5df1caf3eca35b66a10824ae0707, < 234c53e57424992e657e6f4acc00d3df0983176f; >= 801c135ce73d5df1caf3eca35b66a10824ae0707, < fcbc795abe7897da4b5d2a6ab5010e36774b00c2; >= 801c135ce73d5df1caf3eca35b66a10824ae0707, < 5ec4c8aca5a221756a9007deadfea92795319fee; >= 801c135ce73d5df1caf3eca35b66a10824ae0707, < 2ea7195b195009ecf0046e55361f393ba96d02db; >= 801c135ce73d5df1caf3eca35b66a10824ae0707, < 9eccdb0760cbcb4427b5303a83a3007de998af51; >= 801c135ce73d5df1caf3eca35b66a10824ae0707, < c15859bfd326c10230f09cb48a17f8a35f190342
LinuxLinux2.6.22

References

Timeline

Published
Dec 24, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2023

CVE-2023-540887.8In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: hold queue_lock when removing blkg->q_node When blkg is reCVE-2023-54089In the Linux kernel, the following vulnerability has been resolved: virtio_pmem: add the missing REQ_OP_WRITE for flush bio When doing mkfCVE-2023-54096.8HP is aware of a potential security vulnerability in HP t430 and t638 Thin Client PCs. These models may be susceptible to a physical attack,CVE-2023-540909.8In the Linux kernel, the following vulnerability has been resolved: ixgbe: Fix panic during XDP_TX with > 64 CPUs Commit 4fe815850bdc ("ixCVE-2023-54091In the Linux kernel, the following vulnerability has been resolved: drm/client: Fix memory leak in drm_client_target_cloned dmt_mode is alCVE-2023-540928.8In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pv: fix index value of replaced ASCE The index field of theCVE-2023-54093In the Linux kernel, the following vulnerability has been resolved: media: anysee: fix null-ptr-deref in anysee_master_xfer In anysee_mastCVE-2023-540949.8In the Linux kernel, the following vulnerability has been resolved: net: prevent skb corruption on frag list segmentation Ian reported sevCVE-2023-540957.0In the Linux kernel, the following vulnerability has been resolved: powerpc/iommu: Fix notifiers being shared by PCI and VIO buses fail_ioCVE-2023-540967.8In the Linux kernel, the following vulnerability has been resolved: soundwire: fix enumeration completion The soundwire subsystem uses twoCVE-2023-54097In the Linux kernel, the following vulnerability has been resolved: regulator: stm32-pwr: fix of_iomap leak Smatch reports: drivers/regulaCVE-2023-540987.3In the Linux kernel, the following vulnerability has been resolved: drm/i915/gvt: fix gvt debugfs destroy When gvt debug fs is destroyed,
CVE-2023-54087: Unscored | Vulnix