« Volver al listado

CVE-2023-54279

Estado: AplazadaSin puntuar—

In the Linux kernel, the following vulnerability has been resolved:

MIPS: fw: Allow firmware to pass a empty env

fw_getenv will use env entry to determine style of env, however it is legal for firmware to just pass a empty list.

Check if first entry exist before running strchr to avoid null pointer dereference.

CVSS

NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Linux — Linux KernelAI

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2023-54279",
  "cveTags": [],
  "metrics": {},
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "14aecdd419217e041fb5dd2749d11f58503bdf62",
              "lessThan": "f334b31625683418aaa2a335470eec950a95a254",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "14aecdd419217e041fb5dd2749d11f58503bdf62",
              "lessThan": "830181ddced5a05a711dc9da8043203b1f33a77e",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "14aecdd419217e041fb5dd2749d11f58503bdf62",
              "lessThan": "0f91290774c798199ba4b8df93de5c3156b5163d",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "14aecdd419217e041fb5dd2749d11f58503bdf62",
              "lessThan": "47e61cadc7a5f3dffd42d2d6fda81be163f1ab82",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "14aecdd419217e041fb5dd2749d11f58503bdf62",
              "lessThan": "3ef93b7bd9e042db240843f24a80e14da38c6830",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "14aecdd419217e041fb5dd2749d11f58503bdf62",
              "lessThan": "a6b54af407873227caef6262e992f5422cdcb6ae",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "14aecdd419217e041fb5dd2749d11f58503bdf62",
              "lessThan": "ad79828f133e98585ab2236cad04a55eb7141bbe",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "14aecdd419217e041fb5dd2749d11f58503bdf62",
              "lessThan": "aeed787bbbbe1b842beec9a065a36c915226f704",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "14aecdd419217e041fb5dd2749d11f58503bdf62",
              "lessThan": "ee1809ed7bc456a72dc8410b475b73021a3a68d5",
              "versionType": "git"
            }
          ],
          "programFiles": [
            "arch/mips/fw/lib/cmdline.c"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "3.10"
            },
            {
              "status": "unaffected",
              "version": "0",
              "lessThan": "3.10",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "4.14.315",
              "versionType": "semver",
              "lessThanOrEqual": "4.14.*"
            },
            {
              "status": "unaffected",
              "version": "4.19.283",
              "versionType": "semver",
              "lessThanOrEqual": "4.19.*"
            },
            {
              "status": "unaffected",
              "version": "5.4.243",
              "versionType": "semver",
              "lessThanOrEqual": "5.4.*"
            },
            {
              "status": "unaffected",
              "version": "5.10.180",
              "versionType": "semver",
              "lessThanOrEqual": "5.10.*"
            },
            {
              "status": "unaffected",
              "version": "5.15.111",
              "versionType": "semver",
              "lessThanOrEqual": "5.15.*"
            },
            {
              "status": "unaffected",
              "version": "6.1.28",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.*"
            },
            {
              "status": "unaffected",
              "version": "6.2.15",
              "versionType": "semver",
              "lessThanOrEqual": "6.2.*"
            },
            {
              "status": "unaffected",
              "version": "6.3.2",
              "versionType": "semver",
              "lessThanOrEqual": "6.3.*"
            },
            {
              "status": "unaffected",
              "version": "6.4",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ],
          "programFiles": [
            "arch/mips/fw/lib/cmdline.c"
          ],
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2025-12-30T13:16:16.860",
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/0f91290774c798199ba4b8df93de5c3156b5163d",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/3ef93b7bd9e042db240843f24a80e14da38c6830",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/47e61cadc7a5f3dffd42d2d6fda81be163f1ab82",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/830181ddced5a05a711dc9da8043203b1f33a77e",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/a6b54af407873227caef6262e992f5422cdcb6ae",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/ad79828f133e98585ab2236cad04a55eb7141bbe",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/aeed787bbbbe1b842beec9a065a36c915226f704",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/ee1809ed7bc456a72dc8410b475b73021a3a68d5",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/f334b31625683418aaa2a335470eec950a95a254",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ],
  "vulnStatus": "Deferred",
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nMIPS: fw: Allow firmware to pass a empty env\n\nfw_getenv will use env entry to determine style of env,\nhowever it is legal for firmware to just pass a empty list.\n\nCheck if first entry exist before running strchr to avoid\nnull pointer dereference."
    },
    {
      "lang": "es",
      "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nMIPS: fw: Permitir que el firmware pase un 'env' vacío\n\nfw_getenv utilizará la entrada 'env' para determinar el estilo del 'env', sin embargo, es legal que el firmware simplemente pase una lista vacía.\n\nComprobar si la primera entrada existe antes de ejecutar strchr para evitar la desreferencia de puntero nulo."
    }
  ],
  "lastModified": "2026-06-17T06:47:08.813",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}