CVE-2023-54315
In the Linux kernel, the following vulnerability has been resolved:
powerpc/powernv/sriov: perform null check on iov before dereferencing iov
Currently pointer iov is being dereferenced before the null check of iov which can lead to null pointer dereference errors. Fix this by moving the iov null check before the dereferencing.
Detected using cppcheck static analysis: linux/arch/powerpc/platforms/powernv/pci-sriov.c:597:12: warning: Either the condition '!iov' is redundant or there is possible null pointer dereference: iov. [nullPointerRedundantCheck] num_vfs = iov->num_vfs; ^
CVSS
NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.19%
- Percentil entre todas las CVEs puntuadas: 8
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.
Referencias
- https://git.kernel.org/stable/c/07c19c0ad4b07f4b598da369714de028f6a6a323
- https://git.kernel.org/stable/c/6314465b88072a6b6f3b3c12a7898abe09095f95
- https://git.kernel.org/stable/c/72990144e17e5e2cb378f1d9b10530b85b9bc382
- https://git.kernel.org/stable/c/d3a0d96c16e5f8d55e2c70163abda3c7c8328106
- https://git.kernel.org/stable/c/d9a1aaea856002cb58dfb7c8d8770400fa1a0299
- https://git.kernel.org/stable/c/f4f913c980bc6abe0ccfe88fe3909c125afe4a2d
JSON original (NVD)
Mostrar
{
"id": "CVE-2023-54315",
"cveTags": [],
"metrics": {},
"affected": [
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"affectedData": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "052da31d45fc71238ea8bed7e9a84648a1ee0bf3",
"lessThan": "07c19c0ad4b07f4b598da369714de028f6a6a323",
"versionType": "git"
},
{
"status": "affected",
"version": "052da31d45fc71238ea8bed7e9a84648a1ee0bf3",
"lessThan": "d3a0d96c16e5f8d55e2c70163abda3c7c8328106",
"versionType": "git"
},
{
"status": "affected",
"version": "052da31d45fc71238ea8bed7e9a84648a1ee0bf3",
"lessThan": "d9a1aaea856002cb58dfb7c8d8770400fa1a0299",
"versionType": "git"
},
{
"status": "affected",
"version": "052da31d45fc71238ea8bed7e9a84648a1ee0bf3",
"lessThan": "6314465b88072a6b6f3b3c12a7898abe09095f95",
"versionType": "git"
},
{
"status": "affected",
"version": "052da31d45fc71238ea8bed7e9a84648a1ee0bf3",
"lessThan": "72990144e17e5e2cb378f1d9b10530b85b9bc382",
"versionType": "git"
},
{
"status": "affected",
"version": "052da31d45fc71238ea8bed7e9a84648a1ee0bf3",
"lessThan": "f4f913c980bc6abe0ccfe88fe3909c125afe4a2d",
"versionType": "git"
}
],
"programFiles": [
"arch/powerpc/platforms/powernv/pci-sriov.c"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "5.9"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "5.9",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "5.10.188",
"versionType": "semver",
"lessThanOrEqual": "5.10.*"
},
{
"status": "unaffected",
"version": "5.15.121",
"versionType": "semver",
"lessThanOrEqual": "5.15.*"
},
{
"status": "unaffected",
"version": "6.1.39",
"versionType": "semver",
"lessThanOrEqual": "6.1.*"
},
{
"status": "unaffected",
"version": "6.3.13",
"versionType": "semver",
"lessThanOrEqual": "6.3.*"
},
{
"status": "unaffected",
"version": "6.4.4",
"versionType": "semver",
"lessThanOrEqual": "6.4.*"
},
{
"status": "unaffected",
"version": "6.5",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"arch/powerpc/platforms/powernv/pci-sriov.c"
],
"defaultStatus": "affected"
}
]
}
],
"published": "2025-12-30T13:16:20.760",
"references": [
{
"url": "https://git.kernel.org/stable/c/07c19c0ad4b07f4b598da369714de028f6a6a323",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/6314465b88072a6b6f3b3c12a7898abe09095f95",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/72990144e17e5e2cb378f1d9b10530b85b9bc382",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/d3a0d96c16e5f8d55e2c70163abda3c7c8328106",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/d9a1aaea856002cb58dfb7c8d8770400fa1a0299",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/f4f913c980bc6abe0ccfe88fe3909c125afe4a2d",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}
],
"vulnStatus": "Deferred",
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/powernv/sriov: perform null check on iov before dereferencing iov\n\nCurrently pointer iov is being dereferenced before the null check of iov\nwhich can lead to null pointer dereference errors. Fix this by moving the\niov null check before the dereferencing.\n\nDetected using cppcheck static analysis:\nlinux/arch/powerpc/platforms/powernv/pci-sriov.c:597:12: warning: Either\nthe condition '!iov' is redundant or there is possible null pointer\ndereference: iov. [nullPointerRedundantCheck]\n num_vfs = iov->num_vfs;\n ^"
},
{
"lang": "es",
"value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\npowerpc/powernv/sriov: realizar una comprobación de nulo en iov antes de desreferenciar iov\n\nActualmente, el puntero iov está siendo desreferenciado antes de la comprobación de nulo de iov, lo que puede llevar a errores de desreferencia de puntero nulo. Solucione esto moviendo la comprobación de nulo de iov antes de la desreferencia.\n\nDetectado usando análisis estático de cppcheck:\nlinux/arch/powerpc/platforms/powernv/pci-sriov.c:597:12: advertencia: O la condición '!iov' es redundante o hay una posible desreferencia de puntero nulo: iov. [nullPointerRedundantCheck]\n num_vfs = iov->num_vfs;\n ^"
}
],
"lastModified": "2026-06-17T06:47:12.720",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}