CVE-2023-54178 - Vulnerability Details

- of: unittest: fix null pointer dereferencing in of_unittest_find_node_by_name()

Description

In the Linux kernel, the following vulnerability has been resolved:

of: unittest: fix null pointer dereferencing in of_unittest_find_node_by_name()

when kmalloc() fail to allocate memory in kasprintf(), name
or full_name will be NULL, strcmp() will cause
null pointer dereference.

Published: 2025-12-30

Score: n/a

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`0d638a07d3a1e98a7598eb2812a6236324e4c55f`	affected	< c364fa869b33ca42a263bf91c22fce7e6c61d479
`0d638a07d3a1e98a7598eb2812a6236324e4c55f`	affected	< 0b7d715511915a1b39f5fdcbe57a7922dfd66513
`0d638a07d3a1e98a7598eb2812a6236324e4c55f`	affected	< dadf0d0dfcc81cdcb27ba5426676d13a9e4fb925
`0d638a07d3a1e98a7598eb2812a6236324e4c55f`	affected	< f41c65f8d05be734898cbe72af59a401b97d298a
`0d638a07d3a1e98a7598eb2812a6236324e4c55f`	affected	< ea5bc6f5aa099e3e84d037282836234ad77cba88
`0d638a07d3a1e98a7598eb2812a6236324e4c55f`	affected	< 43cc228099c514467b8074d7ede6673cef9f33b9
`0d638a07d3a1e98a7598eb2812a6236324e4c55f`	affected	< c74ae8124f9687062dd99858f34c9d027ddd73da
`0d638a07d3a1e98a7598eb2812a6236324e4c55f`	affected	< 2dd8ee9de71ad8447f8459fb01dade7f6c7132da
`0d638a07d3a1e98a7598eb2812a6236324e4c55f`	affected	< d6ce4f0ea19c32f10867ed93d8386924326ab474

Linux

affected

Version	Status	Constraints
`4.14`	affected	—
`0`	unaffected	< 4.14
`4.14.326`	unaffected	≤ 4.14.*
`4.19.295`	unaffected	≤ 4.19.*
`5.4.257`	unaffected	≤ 5.4.*
`5.10.195`	unaffected	≤ 5.10.*
`5.15.132`	unaffected	≤ 5.15.*
`6.1.53`	unaffected	≤ 6.1.*
`6.4.16`	unaffected	≤ 6.4.*
`6.5.3`	unaffected	≤ 6.5.*
`6.6`	unaffected	≤ *

No data.

No data available yet.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00085.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/0b7d715511915a1b39f5fdcbe57a7922dfd66513
https://git.kernel.org/stable/c/2dd8ee9de71ad8447f8459fb01dade7f6c7132da
https://git.kernel.org/stable/c/43cc228099c514467b8074d7ede6673cef9f33b9
https://git.kernel.org/stable/c/c364fa869b33ca42a263bf91c22fce7e6c61d479
https://git.kernel.org/stable/c/c74ae8124f9687062dd99858f34c9d027ddd73da
https://git.kernel.org/stable/c/d6ce4f0ea19c32f10867ed93d8386924326ab474
https://git.kernel.org/stable/c/dadf0d0dfcc81cdcb27ba5426676d13a9e4fb925
https://git.kernel.org/stable/c/ea5bc6f5aa099e3e84d037282836234ad77cba88
https://git.kernel.org/stable/c/f41c65f8d05be734898cbe72af59a401b97d298a
https://lore.kernel.org/linux-cve-announce/2025123023-CVE-2023-54178-bcb3@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2023-54178
https://www.cve.org/CVERecord?id=CVE-2023-54178

History

Thu, 01 Jan 2026 00:15:00 +0000

Type	Values Removed	Values Added
References		https://lore.kernel.org/linux-cve-announce/2025123023-CVE-2023-54178-bcb3@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2023-54178 https://www.cve.org/CVERecord?id=CVE-2023-54178

Tue, 30 Dec 2025 12:30:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: of: unittest: fix null pointer dereferencing in of_unittest_find_node_by_name() when kmalloc() fail to allocate memory in kasprintf(), name or full_name will be NULL, strcmp() will cause null pointer dereference.
Title		of: unittest: fix null pointer dereferencing in of_unittest_find_node_by_name()
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/0b7d715511915a1b39f5fdcbe57a7922dfd66513 https://git.kernel.org/stable/c/2dd8ee9de71ad8447f8459fb01dade7f6c7132da https://git.kernel.org/stable/c/43cc228099c514467b8074d7ede6673cef9f33b9 https://git.kernel.org/stable/c/c364fa869b33ca42a263bf91c22fce7e6c61d479 https://git.kernel.org/stable/c/c74ae8124f9687062dd99858f34c9d027ddd73da https://git.kernel.org/stable/c/d6ce4f0ea19c32f10867ed93d8386924326ab474 https://git.kernel.org/stable/c/dadf0d0dfcc81cdcb27ba5426676d13a9e4fb925 https://git.kernel.org/stable/c/ea5bc6f5aa099e3e84d037282836234ad77cba88 https://git.kernel.org/stable/c/f41c65f8d05be734898cbe72af59a401b97d298a

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-12-30T12:08:50.324Z

Updated: 2026-05-11T19:56:57.606Z

Reserved: 2025-12-30T12:06:44.496Z

Link: CVE-2023-54178

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2025-12-30T13:16:05.720

Modified: 2026-04-15T00:35:42.020

Link: CVE-2023-54178

Redhat

Severity :

Publid Date: 2025-12-30T00:00:00Z

Links: CVE-2023-54178 - Bugzilla

OpenCVE Enrichment

No data.

Weaknesses

No weakness.

Tracking

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object