CVE-2023-54279

MIPS: fw: Allow firmware to pass a empty env

published December 30, 2025

CVSS
—
EPSS
0%
Percentile
13.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

MIPS: fw: Allow firmware to pass a empty env

fw_getenv will use env entry to determine style of env,

however it is legal for firmware to just pass a empty list.

Check if first entry exist before running strchr to avoid

null pointer dereference.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00233 · 13.4th percentile
Published
2025-12-30T12:16Z
EPSS history
Timeline
  • 30 DEC 12:16Z
    MIPS: fw: Allow firmware to pass a empty env
    cvelistv5