Vulnetix
Try Vulnetix Request Demo
CVE-2023-54279 PUBLISHED

In the Linux kernel, the following vulnerability has been resolved: MIPS: fw: Allow firmware to pass a empty env fw_getenv will use env entry to determine style of env, however it is legal for firmware to just pass a empty list. Check if first entry exist before running strchr to avoid null pointer dereference.

EPSS 0.05% · 15.3th percentile

Risk Scores

EPSS Score
0.05%
15.3th percentile

Affected Products

VendorProductVersions
linuxlinux_kernel3.10, 3.10, 3.10
LinuxLinux3.10, 0, 4.19.283

Timeline

References

Open in Interactive Console →