UnratedFix available
pinctrl: at91-pio4: check return value of devm_kasprintf()
Type: advisorySources: OSV
In the Linux kernel, the following vulnerability has been resolved: pinctrl: at91-pio4: check return value of devm_kasprintf() devm_kasprintf() returns a pointer to dynamically allocated memory. Pointer could be NULL in case allocation fails. Check pointer validity. Identified with coccinelle (kmerr.cocci script). Depends-on: 1c4e5c470a56 ("pinctrl: at91: use devm_kasprintf() to avoid potential leaks") Depends-on: 5a8f9cf269e8 ("pinctrl: at91-pio4: use proper format specifier for unsigned int")
- Products
- Kernel
- Affected versions
- Not specified
- Fixed versions
- 4.14.322, 4.19.291, 5.10.188, 5.15.121, 5.4.251, 6.1.39, 6.3.13, 6.4.4
- CVEs
- CVE-2023-54319
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 2 Nov 2026, 20:15 UTC · Revision 1
Source evidence
pinctrl: at91-pio4: check return value of devm_kasprintf()
core-osv · Original sourcePublished 30 Dec 2025, 12:34 UTC
In the Linux kernel, the following vulnerability has been resolved: pinctrl: at91-pio4: check return value of devm_kasprintf() devm_kasprintf() returns a pointer to dynamically allocated memory. Pointer could be NULL in case allocation fails. Check pointer validity. Identified with coccinelle (kmerr.cocci script). Depends-on: 1c4e5c470a56 ("pinctrl: at91: use devm_kasprintf() to avoid potential leaks") Depends-on: 5a8f9cf269e8 ("pinctrl: at91-pio4: use proper format specifier for unsigned int")
osv:CVE-2023-54319
Kernel
Fixed versions: 4.14.322, 4.19.291, 5.4.251, 5.10.188, 5.15.121, 6.1.39, 6.3.13, 6.4.4
Complete source record
{
"id": "a2e0d76be24a239e5930acbfcc9813db6dc0b3f9de523750b10ac7cd24c73938",
"url": "https://osv.dev/vulnerability/CVE-2023-54319",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "pinctrl: at91-pio4: check return value of devm_kasprintf()",
"summary": "In the Linux kernel, the following vulnerability has been resolved: pinctrl: at91-pio4: check return value of devm_kasprintf() devm_kasprintf() returns a pointer to dynamically allocated memory. Pointer could be NULL in case allocation fails. Check pointer validity. Identified with coccinelle (kmerr.cocci script). Depends-on: 1c4e5c470a56 (\"pinctrl: at91: use devm_kasprintf() to avoid potential leaks\") Depends-on: 5a8f9cf269e8 (\"pinctrl: at91-pio4: use proper format specifier for unsigned int\")",
"evidence": "osv:CVE-2023-54319",
"products": [
{
"name": {
"value": "Kernel",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.14.322",
"evidence": "/affected/1/ranges"
},
{
"value": "4.19.291",
"evidence": "/affected/1/ranges"
},
{
"value": "5.4.251",
"evidence": "/affected/1/ranges"
},
{
"value": "5.10.188",
"evidence": "/affected/1/ranges"
},
{
"value": "5.15.121",
"evidence": "/affected/1/ranges"
},
{
"value": "6.1.39",
"evidence": "/affected/1/ranges"
},
{
"value": "6.3.13",
"evidence": "/affected/1/ranges"
},
{
"value": "6.4.4",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "CVE-2023-54319",
"aliases": [
"CVE-2023-54319"
],
"affected": [
{
"ranges": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "776180848b574c9c01217fa958f10843ffce584f"
},
{
"fixed": "8d788f2ba830d6d32499b198c526d577c590eedf"
},
{
"fixed": "3e8ce1d5a1a9d758b359e5c426543957f35991f8"
},
{
"fixed": "aa3932eb07392d626486428e2ffddc660658e22a"
},
{
"fixed": "f3c7b95c9991dab02e616fc251b6c3516e0bd0ac"
},
{
"fixed": "0a95dd17a73b7603818ad7c46c99d757232be331"
},
{
"fixed": "0af388fce352ed2ab383fd5d1a08db551ca15c38"
},
{
"fixed": "5bfd577cc728270d6cd7af6c652a1e7661f25487"
},
{
"fixed": "8a1fa202f47f39680a4305af744f499a324f8a03"
},
{
"fixed": "f6fd5d4ff8ca0b24cee1af4130bcb1fa96b61aa0"
}
]
}
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-54319.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.4.0"
},
{
"fixed": "4.14.322"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.15.0"
},
{
"fixed": "4.19.291"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.20.0"
},
{
"fixed": "5.4.251"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.5.0"
},
{
"fixed": "5.10.188"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.11.0"
},
{
"fixed": "5.15.121"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.16.0"
},
{
"fixed": "6.1.39"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.2.0"
},
{
"fixed": "6.3.13"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.4.0"
},
{
"fixed": "6.4.4"
}
]
}
],
"package": {
"name": "Kernel",
"ecosystem": "Linux"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-54319.json"
}
}
],
"modified": "2026-10-28T02:30:23.197919082Z",
"provider": "osv",
"references": [
"https://git.kernel.org/stable/c/0a95dd17a73b7603818ad7c46c99d757232be331",
"https://git.kernel.org/stable/c/0af388fce352ed2ab383fd5d1a08db551ca15c38",
"https://git.kernel.org/stable/c/3e8ce1d5a1a9d758b359e5c426543957f35991f8",
"https://git.kernel.org/stable/c/5bfd577cc728270d6cd7af6c652a1e7661f25487",
"https://git.kernel.org/stable/c/8a1fa202f47f39680a4305af744f499a324f8a03",
"https://git.kernel.org/stable/c/8d788f2ba830d6d32499b198c526d577c590eedf",
"https://git.kernel.org/stable/c/aa3932eb07392d626486428e2ffddc660658e22a",
"https://git.kernel.org/stable/c/f3c7b95c9991dab02e616fc251b6c3516e0bd0ac",
"https://git.kernel.org/stable/c/f6fd5d4ff8ca0b24cee1af4130bcb1fa96b61aa0",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54319.json",
"https://nvd.nist.gov/vuln/detail/CVE-2023-54319",
"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
],
"provider_metadata": {
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54319.json"
}
},
"related_cves": [
{
"value": "CVE-2023-54319",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 489740,
"published_at": "2025-12-30T12:34:13.468+00:00"
}