Not yet scoredPublished Dec 24, 2025

CVE-2023-54049rpmsg: glink: Add check for kstrdup

Updated under an hour ago (Oct 26, 2026, 3:50 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: rpmsg: glink: Add check for kstrdup Add check for the return value of kstrdup() and return the error if it fails in order to avoid NULL pointer dereference.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from b4f8e52b89f69f5563ac4cb9ffdacc4418917af1 before 5197498c902502127a47abda5359dd7f1d41946f; from b4f8e52b89f69f5563ac4cb9ffdacc4418917af1 before 13928a837e0f014dac0322dd9f8a67c486e7f232; from b4f8e52b89f69f5563ac4cb9ffdacc4418917af1 before efa7f31669f04084ed5996ed467ba529f4c90467; from b4f8e52b89f69f5563ac4cb9ffdacc4418917af1 before 71ac2ffd7f80fdd350486f6645dc48456e55a59b; from b4f8e52b89f69f5563ac4cb9ffdacc4418917af1 before abd740db896b3c588dced175af98b95852c1854b; from b4f8e52b89f69f5563ac4cb9ffdacc4418917af1 before cae0787e408c30a575760a531ccb69a6b48bbfaf; from b4f8e52b89f69f5563ac4cb9ffdacc4418917af1 before 174cf8853857c190a3c4f1f1d2d06cfd095fe859; from b4f8e52b89f69f5563ac4cb9ffdacc4418917af1 before e3734a9558afac91df3c655a6f2376b9d14933b7; and 1 more ranges	CNA record

References

References

https://git.kernel.org/stable/c/5197498c902502127a47abda5359dd7f1d41946f
https://git.kernel.org/stable/c/13928a837e0f014dac0322dd9f8a67c486e7f232
https://git.kernel.org/stable/c/efa7f31669f04084ed5996ed467ba529f4c90467
https://git.kernel.org/stable/c/71ac2ffd7f80fdd350486f6645dc48456e55a59b
https://git.kernel.org/stable/c/abd740db896b3c588dced175af98b95852c1854b
https://git.kernel.org/stable/c/cae0787e408c30a575760a531ccb69a6b48bbfaf
https://git.kernel.org/stable/c/174cf8853857c190a3c4f1f1d2d06cfd095fe859
https://git.kernel.org/stable/c/e3734a9558afac91df3c655a6f2376b9d14933b7
https://git.kernel.org/stable/c/b5c9ee8296a3760760c7b5d2e305f91412adc795

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.