Not yet scoredPublished Dec 30, 2025

CVE-2023-54178of: unittest: fix null pointer dereferencing in of_unittest_find_node_by_name()

Updated under an hour ago (Oct 26, 2026, 6:50 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: of: unittest: fix null pointer dereferencing in of_unittest_find_node_by_name() when kmalloc() fail to allocate memory in kasprintf(), name or full_name will be NULL, strcmp() will cause null pointer dereference.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 0d638a07d3a1e98a7598eb2812a6236324e4c55f before c364fa869b33ca42a263bf91c22fce7e6c61d479; 0d638a07d3a1e98a7598eb2812a6236324e4c55f builds before 0b7d715511915a1b39f5fdcbe57a7922dfd66513; from 0d638a07d3a1e98a7598eb2812a6236324e4c55f before dadf0d0dfcc81cdcb27ba5426676d13a9e4fb925; from 0d638a07d3a1e98a7598eb2812a6236324e4c55f before f41c65f8d05be734898cbe72af59a401b97d298a; from 0d638a07d3a1e98a7598eb2812a6236324e4c55f before ea5bc6f5aa099e3e84d037282836234ad77cba88; from 0d638a07d3a1e98a7598eb2812a6236324e4c55f before 43cc228099c514467b8074d7ede6673cef9f33b9; from 0d638a07d3a1e98a7598eb2812a6236324e4c55f before c74ae8124f9687062dd99858f34c9d027ddd73da; from 0d638a07d3a1e98a7598eb2812a6236324e4c55f before 2dd8ee9de71ad8447f8459fb01dade7f6c7132da; and 1 more ranges	CNA record

References

References

https://git.kernel.org/stable/c/c364fa869b33ca42a263bf91c22fce7e6c61d479
https://git.kernel.org/stable/c/0b7d715511915a1b39f5fdcbe57a7922dfd66513
https://git.kernel.org/stable/c/dadf0d0dfcc81cdcb27ba5426676d13a9e4fb925
https://git.kernel.org/stable/c/f41c65f8d05be734898cbe72af59a401b97d298a
https://git.kernel.org/stable/c/ea5bc6f5aa099e3e84d037282836234ad77cba88
https://git.kernel.org/stable/c/43cc228099c514467b8074d7ede6673cef9f33b9
https://git.kernel.org/stable/c/c74ae8124f9687062dd99858f34c9d027ddd73da
https://git.kernel.org/stable/c/2dd8ee9de71ad8447f8459fb01dade7f6c7132da
https://git.kernel.org/stable/c/d6ce4f0ea19c32f10867ed93d8386924326ab474

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.