CVE-2023-54279

Not scored yetLast modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

MIPS: fw: Allow firmware to pass a empty env

fw_getenv will use env entry to determine style of env, however it is legal for firmware to just pass a empty list.

Check if first entry exist before running strchr to avoid null pointer dereference.

Metrics

No CVSS score has been published yet.

Affected software

VendorProductVersions
LinuxLinux>= 14aecdd419217e041fb5dd2749d11f58503bdf62, < f334b31625683418aaa2a335470eec950a95a254; >= 14aecdd419217e041fb5dd2749d11f58503bdf62, < 830181ddced5a05a711dc9da8043203b1f33a77e; >= 14aecdd419217e041fb5dd2749d11f58503bdf62, < 0f91290774c798199ba4b8df93de5c3156b5163d; >= 14aecdd419217e041fb5dd2749d11f58503bdf62, < 47e61cadc7a5f3dffd42d2d6fda81be163f1ab82; >= 14aecdd419217e041fb5dd2749d11f58503bdf62, < 3ef93b7bd9e042db240843f24a80e14da38c6830; >= 14aecdd419217e041fb5dd2749d11f58503bdf62, < a6b54af407873227caef6262e992f5422cdcb6ae; >= 14aecdd419217e041fb5dd2749d11f58503bdf62, < ad79828f133e98585ab2236cad04a55eb7141bbe; >= 14aecdd419217e041fb5dd2749d11f58503bdf62, < aeed787bbbbe1b842beec9a065a36c915226f704; >= 14aecdd419217e041fb5dd2749d11f58503bdf62, < ee1809ed7bc456a72dc8410b475b73021a3a68d5
LinuxLinux3.10

References

Timeline

Published
Dec 30, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2023

CVE-2023-54286.5The Image vertical reel scroll slideshow plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, aCVE-2023-542809.8In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential race when tree connecting ipc Protect access of TCCVE-2023-54281In the Linux kernel, the following vulnerability has been resolved: btrfs: release path before inode lookup during the ino lookup ioctl DuCVE-2023-54282In the Linux kernel, the following vulnerability has been resolved: media: tuners: qt1010: replace BUG_ON with a regular error BUG_ON is uCVE-2023-54283In the Linux kernel, the following vulnerability has been resolved: bpf: Address KCSAN report on bpf_lru_list KCSAN reported a data-race wCVE-2023-542847.1In the Linux kernel, the following vulnerability has been resolved: media: av7110: prevent underflow in write_ts_to_decoder() The buf[4] vCVE-2023-542857.8In the Linux kernel, the following vulnerability has been resolved: iomap: Fix possible overflow condition in iomap_write_delalloc_scan foCVE-2023-542867.6In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtraceCVE-2023-54287In the Linux kernel, the following vulnerability has been resolved: tty: serial: imx: disable Ageing Timer interrupt request irq There mayCVE-2023-54288In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fortify the spinlock against deadlock by interrupt In CVE-2023-54289In the Linux kernel, the following vulnerability has been resolved: scsi: qedf: Fix NULL dereference in error handling Smatch reported: dCVE-2023-54296.5The Information Reel plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 10.0 d