Not yet scoredPublished Dec 30, 2025

CVE-2023-54304firmware: meson_sm: fix to avoid potential NULL pointer dereference

Updated under an hour ago (Oct 27, 2026, 2:20 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: firmware: meson_sm: fix to avoid potential NULL pointer dereference of_match_device() may fail and returns a NULL pointer. Fix this by checking the return value of of_match_device.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 525ae72d9f0b5cf027f1c78c84e41c90e86df026 before fba9c24c196310546f13c77ff66d0741155fa771; from 8cde3c2153e8f57be884c0e73f18bc4de150e870 before 9f4017cac70c04090dd4f672e755d6c875af67d8; from 8cde3c2153e8f57be884c0e73f18bc4de150e870 before 502dfc5875bab9ae5d6a2939146c2c5e5683be40; from 8cde3c2153e8f57be884c0e73f18bc4de150e870 before bd3a6b6d5dd863dbbe17985c7612159cf4533cad; from 8cde3c2153e8f57be884c0e73f18bc4de150e870 before 68f3209546b5083f8bffa46f7173cc05191eace1; 8cde3c2153e8f57be884c0e73f18bc4de150e870 builds before 2d6c4a1a4e6678cb98dd57964f133a995ecc91c1; from 8cde3c2153e8f57be884c0e73f18bc4de150e870 before f2ed165619c16577c02b703a114a1f6b52026df4	CNA record

References

References

https://git.kernel.org/stable/c/fba9c24c196310546f13c77ff66d0741155fa771
https://git.kernel.org/stable/c/9f4017cac70c04090dd4f672e755d6c875af67d8
https://git.kernel.org/stable/c/502dfc5875bab9ae5d6a2939146c2c5e5683be40
https://git.kernel.org/stable/c/bd3a6b6d5dd863dbbe17985c7612159cf4533cad
https://git.kernel.org/stable/c/68f3209546b5083f8bffa46f7173cc05191eace1
https://git.kernel.org/stable/c/2d6c4a1a4e6678cb98dd57964f133a995ecc91c1
https://git.kernel.org/stable/c/f2ed165619c16577c02b703a114a1f6b52026df4

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.