CVE-2023-54189
pstore/ram: Add check for kstrdup
N/A
Published: December 30, 2025 at 12:08 PM UTC
Updated: October 28, 2026 at 07:10 PM UTC
1 product affected across 1 vendorLinux Kernel
Using Linux by Linux?
Get instant alerts when new vulnerabilities affect Linux - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.2%
Description
In the Linux kernel, the following vulnerability has been resolved: pstore/ram: Add check for kstrdup Add check for the return value of kstrdup() and return the error if it fails in order to avoid NULL pointer dereference.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
5.4.12 ≤ v < 5.4.2515.4.125.5c617a3b777b92a0e80ceff2dffaae9350d4c3850e163fdb3f7f8c62dccf194f3f37a7bcb3c333aa8
Vendor states this is fixed in 065c81ae5817b245bb9feb6d54e027702740b49a (fixed)
Vendor states this is fixed in 2a764a2facd9dd88a69777200f65dfd0182765dc (fixed)
Vendor states this is fixed in 38a9d7dac3ad25323145b4aaea3b5f434f50011d (fixed)
Vendor states this is fixed in 8430a8e8e85420d4cb51dcb08b0278ab194ea82f (fixed)
Vendor states this is fixed in a14cb307267ba7a1715403e071bdc4deda77eef5 (fixed)
Vendor states this is fixed in d97038d5ec2062733c1e016caf9baaf68cf64ea1 (fixed)
Vendor states this is fixed in f57ba91a46d3fc52bfdac9cca5cf5572ec7afd6d (fixed)
Vendor states this is fixed in 5.10.188 (unaffected)
Vendor states this is fixed in 5.15.121 (unaffected)
Vendor states this is fixed in 5.4.251 (unaffected)
Vendor states this is fixed in 5.5 (unaffected)
Vendor states this is fixed in 6.1.39 (unaffected)
Vendor states this is fixed in 6.3.13 (unaffected)
Vendor states this is fixed in 6.4.4 (unaffected)
Vendor states this is fixed in 6.5 (unaffected)
Remediation
No guide yetNo remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.
References (7)
Quick Info
StatusDEFERRED
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card