What’s Vulnerable › Vulnerabilities

CVE-2023-54298: thermal: intel: quark_dts: fix error pointer dereference

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-30 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: thermal: intel: quark_dts: fix error pointer dereference If alloc_soc_dts() fails, then we can just return. Trying to free "soc_dts" will lead to an Oops.

Affected products

• Linux kernel: 4.2 — fixed in 6.3

How to fix

Upgrade to a fixed version: Linux kernel 6.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0b366c6a42e2e2bc67af8d1130b68f3bfa31c80e
• https://git.kernel.org/stable/c/24c221b11c2894e1a5f07b93362d9bc91c6d8be7
• https://git.kernel.org/stable/c/5eaf55b38691291d49417c22e726591078ca1893
• https://git.kernel.org/stable/c/69e49f1b53605706bc2203455021539aba2ebe21
• https://git.kernel.org/stable/c/d0178f2788fb1183a5cc350213efdc94010b9147
• https://git.kernel.org/stable/c/e23f1d9e6e03d04da2f18e78ab5d4255ffeb1333
• https://git.kernel.org/stable/c/f1b930e740811d416de4d2074da48b6633a672c8
• https://git.kernel.org/stable/c/f73134231fa23e0856c15010db5f5c03693c1e92

Get alerted when CVE-2023-54298 or the next vulnerability affects your stack