CVE-2023-54298: thermal: intel: quark_dts: fix error pointer dereference
In the Linux kernel, the following vulnerability has been resolved:
thermal: intel: quarkdts: fix error pointer dereference
If allocsocdts() fails, then we can just return. Trying to free "socdts" will lead to an Oops.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-54298?
CVE-2023-54298 is categorized as a medium-severity vulnerability due to its potential for causing system instability.
How do I fix CVE-2023-54298?
To fix CVE-2023-54298, ensure you update to the latest Linux kernel version that includes the patch for this vulnerability.
What causes CVE-2023-54298?
CVE-2023-54298 is caused by an error pointer dereference in the intel quark_dts thermal driver when allocation fails.
Is CVE-2023-54298 remotely exploitable?
No, CVE-2023-54298 is not remotely exploitable as it requires local access to the system to trigger the vulnerability.
Which systems are affected by CVE-2023-54298?
CVE-2023-54298 affects the Linux kernel specifically in the context of the intel quark_dts thermal driver.