CVE-2023-52467

mfd: syscon: Fix null pointer dereference in of_syscon_register()

MEDIUM

5.5

CVSS Score

Published: February 25, 2024 at 08:16 AM UTC

Updated: June 17, 2026 at 06:42 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.3%

SSVC

No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: mfd: syscon: Fix null pointer dereference in of_syscon_register() kasprintf() returns a pointer to dynamically allocated memory which can be NULL upon failure.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

5.11.0 ≤ v < 5.15.1485.16.0 ≤ v < 6.1.755.9 ≤ v < 5.10.2095.9 ≤ v < 5.15.1485.9 ≤ v < 6.1.755.9 ≤ v < 6.6.145.9 ≤ v < 6.7.25.9 ≤ v < 6.85.9.0 ≤ v < 5.10.2096.2.0 ≤ v < 6.6.146.7.0 ≤ v < 6.7.25.9e15d7f2b81d2e7d93115d46fa931b366c1cdebc2

Vendor states this is fixed in 3ef1130deee98997275904d9bfc37af75e1e906c (fixed)

Vendor states this is fixed in 41673c66b3d0c09915698fec5c13b24336f18dd1 (fixed)

Vendor states this is fixed in 527e8c5f3d00299822612c495d5adf1f8f43c001 (fixed)

Vendor states this is fixed in 7f2c410ac470959b88e03dadd94b7a0b71df7973 (fixed)

Vendor states this is fixed in 927626a2073887ee30ba00633260d4d203f8e875 (fixed)

Vendor states this is fixed in c3e3a2144bf50877551138ffce9f7aa6ddfe385b (fixed)

Vendor states this is fixed in 5.10.209 (unaffected)

Vendor states this is fixed in 5.15.148 (unaffected)

Vendor states this is fixed in 5.9 (unaffected)

Vendor states this is fixed in 6.1.75 (unaffected)

Vendor states this is fixed in 6.6.14 (unaffected)

Vendor states this is fixed in 6.7.2 (unaffected)