CVE-2023-54241: 
Linux Kernel vulnerability analysis and mitigation

CVE-2023-54241 is a NULL pointer dereference vulnerability in the Linux kernel's MIPS KVM subsystem. It was introduced after commit 45c7e8af4a5e3f0bea4ac209 ("MIPS: Remove KVM_TE support") and manifests when creating a KVM guest on MIPS hardware with VZ extensions, causing a kernel panic. The vulnerability was published on December 30, 2025, and affects the Linux kernel (specific stable branches). It carries an EPSS score of 0.018% (very low), indicating minimal current exploitation probability (Feedly).

The root cause is a NULL pointer dereference (CWE-476) in the MIPS KVM code path triggered after the removal of KVM_TE (Trap-and-Emulate) support. When a KVM guest is created on a MIPS system with VZ extensions, the kernel attempts to dereference a pointer at virtual address 0x0000000000000300, which is NULL or uninitialized following the KVM_TE removal refactoring. The crash occurs at epc == ffffffffc06356ec in the KVM module, as shown in the kernel oops trace, and requires local access to a MIPS host system with KVM VZ support enabled to trigger (Feedly). Fixes are tracked in multiple stable kernel commits: 6b9fb255d537, bd9cf2a5f9e1, cd517f9a9d07, and e4de2057698636.

Successful exploitation causes a kernel panic (system crash), resulting in a denial of service on the affected MIPS host system. Since this is a local vulnerability requiring the ability to create KVM guests, the primary impact is availability — an attacker or misconfigured guest creation process can crash the hypervisor host. There is no evidence of confidentiality or integrity impact beyond the crash itself (Feedly).

Apply the upstream Linux kernel patches that fix the NULL pointer dereference in the MIPS KVM subsystem. The fixes are available in stable kernel commits 6b9fb255d537, bd9cf2a5f9e1, cd517f9a9d07, and e4de2057698636 on kernel.org. Users should update to a patched kernel version as provided by their Linux distribution. As a workaround, disabling KVM on affected MIPS systems prevents the vulnerable code path from being triggered (Feedly).