Fluid Attacks Database

Description

A NULL pointer dereference was found in the driver core's device_add() function. When dpm_sysfs_add() fails after bus_add_device() succeeds, the error path attempts to remove the driver binding that was never completed, causing a crash.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 11	linux	=5.10.103-1 \|\| =5.10.103-1~bpo10+1 \|\| =5.10.106-1 \|\| =5.10.113-1 \|\| =5.10.120-1 \|\| =5.10.120-1~bpo10+1 \|\| =5.10.127-1 \|\| =5.10.127-2 \|\| =5.10.127-2~bpo10+1 \|\| =5.10.136-1 \|\| =5.10.140-1 \|\| =5.10.148-1 \|\| =5.10.149-1 \|\| =5.10.149-2 \|\| =5.10.158-1 \|\| =5.10.158-2 \|\| =5.10.162-1 \|\| =5.10.178-1 \|\| =5.10.178-2 \|\| =5.10.178-3 \|\| =5.10.179-1 \|\| =5.10.179-2 \|\| =5.10.179-3 \|\| =5.10.179-4 \|\| =5.10.179-5 \|\| =5.10.191-1 \|\| =5.10.197-1 \|\| =5.10.205-1 \|\| =5.10.205-2 \|\| =5.10.209-1 \|\| =5.10.209-2 \|\| =5.10.216-1 \|\| =5.10.218-1 \|\| =5.10.221-1 \|\| =5.10.223-1 \|\| =5.10.226-1 \|\| =5.10.234-1 \|\| =5.10.237-1 \|\| =5.10.244-1 \|\| =5.10.247-1 \|\| =5.10.46-4 \|\| =5.10.46-5 \|\| =5.10.70-1 \|\| =5.10.70-1~bpo10+1 \|\| =5.10.84-1 \|\| =5.10.92-1 \|\| =5.10.92-1~bpo10+1 \|\| =5.10.92-2 \|\| >=0 <5.10.249-1	5.10.249-1
debian 12	linux	>=0 <6.1.20-1	6.1.20-1
debian 13	linux	>=0 <6.1.20-1	6.1.20-1
debian 14	linux	>=0 <6.1.20-1	6.1.20-1
rpm rhel7	kernel-rt	-	-
rpm rhel6	kernel	-	-
rpm rhel7	kernel	-	-
rpm rhel8	kernel	<0:4.18.0-513.5.1.el8_9	0:4.18.0-513.5.1.el8_9
rpm rhel9	kernel	<0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
rpm rhel8	kernel-rt	-	-

1-10 of 11

Aliases

1. CVE-2023-543212. NVD-2023-543213. OSV-DEBIAN-2023-543214. OSV-2023-543215. SECURITY-TRACKER-CVE-2023-54321

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.