CVE-2023-54279 in Linux
요약
\~에 의해 MITRE • 2025. 12. 30.
In the Linux kernel, the following vulnerability has been resolved:
MIPS: fw: Allow firmware to pass a empty env
fw_getenv will use env entry to determine style of env, however it is legal for firmware to just pass a empty list.
Check if first entry exist before running strchr to avoid null pointer dereference.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.