Not yet scoredPublished Dec 24, 2025

CVE-2023-54087ubi: Fix possible null-ptr-deref in ubi_free_volume()

Updated under an hour ago (Oct 26, 2026, 5:30 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: ubi: Fix possible null-ptr-deref in ubi_free_volume() It willl cause null-ptr-deref in the following case: uif_init() ubi_add_volume() cdev_add() -> if it fails, call kill_volumes() device_register() kill_volumes() -> if ubi_add_volume() fails call this function ubi_free_volume() cdev_del() device_unregister() -> trying to delete a not added device, it causes null-ptr-deref So in ubi_free_volume(), it delete devices whether they are added or not, it will causes null-ptr-deref. Handle the error case whlie calling ubi_add_volume() to fix this problem. If add volume fails, set the corresponding vol to null, so it can not be accessed in kill_volumes() and release the resource in ubi_add_volume() error path.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 801c135ce73d5df1caf3eca35b66a10824ae0707 before 5558bcf1c58720ca6e9d6198d921cb3aa337f038; 801c135ce73d5df1caf3eca35b66a10824ae0707 builds before 45b2c5ca4d2edae70f19fdb086bd927840c4c309; 801c135ce73d5df1caf3eca35b66a10824ae0707 builds before 234c53e57424992e657e6f4acc00d3df0983176f; from 801c135ce73d5df1caf3eca35b66a10824ae0707 before fcbc795abe7897da4b5d2a6ab5010e36774b00c2; 801c135ce73d5df1caf3eca35b66a10824ae0707 builds before 5ec4c8aca5a221756a9007deadfea92795319fee; 801c135ce73d5df1caf3eca35b66a10824ae0707 builds before 2ea7195b195009ecf0046e55361f393ba96d02db; 801c135ce73d5df1caf3eca35b66a10824ae0707 builds before 9eccdb0760cbcb4427b5303a83a3007de998af51; from 801c135ce73d5df1caf3eca35b66a10824ae0707 before c15859bfd326c10230f09cb48a17f8a35f190342	CNA record

References

References

https://git.kernel.org/stable/c/5558bcf1c58720ca6e9d6198d921cb3aa337f038
https://git.kernel.org/stable/c/45b2c5ca4d2edae70f19fdb086bd927840c4c309
https://git.kernel.org/stable/c/234c53e57424992e657e6f4acc00d3df0983176f
https://git.kernel.org/stable/c/fcbc795abe7897da4b5d2a6ab5010e36774b00c2
https://git.kernel.org/stable/c/5ec4c8aca5a221756a9007deadfea92795319fee
https://git.kernel.org/stable/c/2ea7195b195009ecf0046e55361f393ba96d02db
https://git.kernel.org/stable/c/9eccdb0760cbcb4427b5303a83a3007de998af51
https://git.kernel.org/stable/c/c15859bfd326c10230f09cb48a17f8a35f190342

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.