Back to CVE records
Not yet scoredPublished Dec 30, 2025

CVE-2023-54248fs/ntfs3: Add check for kmemdup

Updated under an hour ago ()

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Add check for kmemdup Since the kmemdup may return NULL pointer, it should be better to add check for the return value in order to avoid NULL pointer dereference.

CVSS
Not yet scored
Weakness (CWE)
Not given
Known exploited
Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days)
Not loaded for this CVE
Assigned by
Linux
NVD analysis
Deferred
Record last updated
May 11, 2026
First seen by InfoSec Signals
Oct 9, 2026

Affected products

Affected products
Linux Linux
linux:linux (from the name)
from b46acd6a6a627d876898e1c84d3f84902264b445 before 952bbfcedbf895963509861e55a6e4fc105eb842; from b46acd6a6a627d876898e1c84d3f84902264b445 before 7898db22ed6cee909513cf4935b5f9f0298b74f0; from b46acd6a6a627d876898e1c84d3f84902264b445 before 9f36704a58adade3b0216f8a3fa5503db4517208; from b46acd6a6a627d876898e1c84d3f84902264b445 before cdcdfd57f4c701f832787da1309cc6687917d783; from b46acd6a6a627d876898e1c84d3f84902264b445 before e6c3cef24cb0d045f99d5cb039b344874e3cfd74
CNA record

References

References

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.
CVE-2023-54248: fs/ntfs3: Add check for kmemdup | InfoSec Signals