CVE-2023-54178

of: unittest: fix null pointer dereferencing in of_unittest_find_node_by_name()

State: Published
Severity: Not scored
Published: Dec 30, 2025
Updated: May 11, 2026
Reserved: Dec 30, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

of: unittest: fix null pointer dereferencing in of_unittest_find_node_by_name()

when kmalloc() fail to allocate memory in kasprintf(), name or full_name will be NULL, strcmp() will cause null pointer dereference.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	0d638a07d3a1e98a7598eb2812a6236324e4c55f to before c364fa869b33ca42a263bf91c22fce7e6c61d479Affected 0d638a07d3a1e98a7598eb2812a6236324e4c55f to before 0b7d715511915a1b39f5fdcbe57a7922dfd66513Affected 0d638a07d3a1e98a7598eb2812a6236324e4c55f to before dadf0d0dfcc81cdcb27ba5426676d13a9e4fb925Affected 0d638a07d3a1e98a7598eb2812a6236324e4c55f to before f41c65f8d05be734898cbe72af59a401b97d298aAffected 0d638a07d3a1e98a7598eb2812a6236324e4c55f to before ea5bc6f5aa099e3e84d037282836234ad77cba88Affected 0d638a07d3a1e98a7598eb2812a6236324e4c55f to before 43cc228099c514467b8074d7ede6673cef9f33b9Affected 0d638a07d3a1e98a7598eb2812a6236324e4c55f to before c74ae8124f9687062dd99858f34c9d027ddd73daAffected 0d638a07d3a1e98a7598eb2812a6236324e4c55f to before 2dd8ee9de71ad8447f8459fb01dade7f6c7132daAffected 0d638a07d3a1e98a7598eb2812a6236324e4c55f to before d6ce4f0ea19c32f10867ed93d8386924326ab474Affected
LinuxLinux	4.14Affected before 4.14Not affected 4.14.326 through 4.14.Not affected 4.19.295 through 4.19.Not affected 5.4.257 through 5.4.Not affected 5.10.195 through 5.10.Not affected 5.15.132 through 5.15.Not affected 6.1.53 through 6.1.Not affected 6.4.16 through 6.4.Not affected 6.5.3 through 6.5.Not affected 6.6 and laterNot affected

Product

Versions

LinuxLinux

0d638a07d3a1e98a7598eb2812a6236324e4c55f to before c364fa869b33ca42a263bf91c22fce7e6c61d479Affected
0d638a07d3a1e98a7598eb2812a6236324e4c55f to before 0b7d715511915a1b39f5fdcbe57a7922dfd66513Affected
0d638a07d3a1e98a7598eb2812a6236324e4c55f to before dadf0d0dfcc81cdcb27ba5426676d13a9e4fb925Affected
0d638a07d3a1e98a7598eb2812a6236324e4c55f to before f41c65f8d05be734898cbe72af59a401b97d298aAffected
0d638a07d3a1e98a7598eb2812a6236324e4c55f to before ea5bc6f5aa099e3e84d037282836234ad77cba88Affected
0d638a07d3a1e98a7598eb2812a6236324e4c55f to before 43cc228099c514467b8074d7ede6673cef9f33b9Affected
0d638a07d3a1e98a7598eb2812a6236324e4c55f to before c74ae8124f9687062dd99858f34c9d027ddd73daAffected
0d638a07d3a1e98a7598eb2812a6236324e4c55f to before 2dd8ee9de71ad8447f8459fb01dade7f6c7132daAffected
0d638a07d3a1e98a7598eb2812a6236324e4c55f to before d6ce4f0ea19c32f10867ed93d8386924326ab474Affected

LinuxLinux

4.14Affected
before 4.14Not affected
4.14.326 through 4.14.*Not affected
4.19.295 through 4.19.*Not affected
5.4.257 through 5.4.*Not affected
5.10.195 through 5.10.*Not affected
5.15.132 through 5.15.*Not affected
6.1.53 through 6.1.*Not affected
6.4.16 through 6.4.*Not affected
6.5.3 through 6.5.*Not affected
6.6 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.