01 Record

CVE-2023-54279

MIPS: fw: Allow firmware to pass a empty env

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

MIPS: fw: Allow firmware to pass a empty env

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.23% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 14.0% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Deferred. NVD last modified this record on 2026-06-17.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published: 2025-12-30 12:16Z10 MO AGO
Last updated: 2026-05-11 19:58Z5 MO AGO
Reserved: 2025-12-30
Assigning CNA: Linux
Record state: PUBLISHED
Severity: Not rated by the issuing CNA
CNA CVSS vector: Not published by the issuing CNA
Weaknesses: No CWE assigned
Data version: 5.2
Document digest: aa491282ef5766d2db30d020e65e0479562426f5d53a8eec5495af56e4548a09

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux14aecdd419217e041fb5dd2749d11f58503bdf62 to < f334b31625683418aaa2a335470eec950a95a254, 14aecdd419217e041fb5dd2749d11f58503bdf62 to < 830181ddced5a05a711dc9da8043203b1f33a77e, 14aecdd419217e041fb5dd2749d11f58503bdf62 to < 0f91290774c798199ba4b8df93de5c3156b5163d, 14aecdd419217e041fb5dd2749d11f58503bdf62 to < 47e61cadc7a5f3dffd42d2d6fda81be163f1ab82, 14aecdd419217e041fb5dd2749d11f58503bdf62 to < 3ef93b7bd9e042db240843f24a80e14da38c6830, 14aecdd419217e041fb5dd2749d11f58503bdf62 to < a6b54af407873227caef6262e992f5422cdcb6ae, 14aecdd419217e041fb5dd2749d11f58503bdf62 to < ad79828f133e98585ab2236cad04a55eb7141bbe, 14aecdd419217e041fb5dd2749d11f58503bdf62 to < aeed787bbbbe1b842beec9a065a36c915226f704, 14aecdd419217e041fb5dd2749d11f58503bdf62 to < ee1809ed7bc456a72dc8410b475b73021a3a68d5, 3.10—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/f334b31625683418aaa2a335470eec950a95a254
git.kernel.orghttps://git.kernel.org/stable/c/830181ddced5a05a711dc9da8043203b1f33a77e
git.kernel.orghttps://git.kernel.org/stable/c/0f91290774c798199ba4b8df93de5c3156b5163d
git.kernel.orghttps://git.kernel.org/stable/c/47e61cadc7a5f3dffd42d2d6fda81be163f1ab82
git.kernel.orghttps://git.kernel.org/stable/c/3ef93b7bd9e042db240843f24a80e14da38c6830
git.kernel.orghttps://git.kernel.org/stable/c/a6b54af407873227caef6262e992f5422cdcb6ae
git.kernel.orghttps://git.kernel.org/stable/c/ad79828f133e98585ab2236cad04a55eb7141bbe
git.kernel.orghttps://git.kernel.org/stable/c/aeed787bbbbe1b842beec9a065a36c915226f704
git.kernel.orghttps://git.kernel.org/stable/c/ee1809ed7bc456a72dc8410b475b73021a3a68d5

07 Fixed in

Debian 12

linux
Fixed in 6.1.37-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.3.7-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.3.7-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.