What’s Vulnerable › Vulnerabilities

CVE-2023-54304: firmware: meson_sm: fix to avoid potential NULL pointer dereference

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-30 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: firmware: meson_sm: fix to avoid potential NULL pointer dereference of_match_device() may fail and returns a NULL pointer. Fix this by checking the return value of of_match_device.

Affected products

• Linux kernel: 5.5 — fixed in 6.6

How to fix

Upgrade to a fixed version: Linux kernel 6.6. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/2d6c4a1a4e6678cb98dd57964f133a995ecc91c1
• https://git.kernel.org/stable/c/502dfc5875bab9ae5d6a2939146c2c5e5683be40
• https://git.kernel.org/stable/c/68f3209546b5083f8bffa46f7173cc05191eace1
• https://git.kernel.org/stable/c/9f4017cac70c04090dd4f672e755d6c875af67d8
• https://git.kernel.org/stable/c/bd3a6b6d5dd863dbbe17985c7612159cf4533cad
• https://git.kernel.org/stable/c/f2ed165619c16577c02b703a114a1f6b52026df4
• https://git.kernel.org/stable/c/fba9c24c196310546f13c77ff66d0741155fa771

Get alerted when CVE-2023-54304 or the next vulnerability affects your stack