CVE-2024-38390

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-38390
In the Linux kernel, the following vulnerability has been resolved: drm/msm/a6xx: Avoid a nullptr dereference when speedbin setting fails Calling a6xx_destroy() before adreno_gpu_init() leads to a null pointer dereference on: msm_gpu_cleanup() : platform_set_drvdata(gpu->pdev, NULL); as gpu->pdev is only assigned in: a6xx_gpu_init() |_ adreno_gpu_init |_ msm_gpu_init() Instead of relying on handwavy null checks down the cleanup chain, explicitly de-allocate the LLC data and free a6xx_gpu instead. Patchwork: https://patchwork.freedesktop.org/patch/588919/

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/247849eeb3fd88f8990ed73e33af70d5c10f9aec Patch
https://git.kernel.org/stable/c/46d4efcccc688cbacdd70a238bedca510acaa8e4 Patch
https://git.kernel.org/stable/c/617e3d1680504a3f9d88e1582892c68be155498f Patch
https://git.kernel.org/stable/c/a1955a6df91355fef72a3a254700acd3cc1fec0d Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

09 Sep 2024, 13:38

Type Values Removed Values Added
First Time Linux linux Kernel
Linux
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/247849eeb3fd88f8990ed73e33af70d5c10f9aec - () https://git.kernel.org/stable/c/247849eeb3fd88f8990ed73e33af70d5c10f9aec - Patch
References () https://git.kernel.org/stable/c/46d4efcccc688cbacdd70a238bedca510acaa8e4 - () https://git.kernel.org/stable/c/46d4efcccc688cbacdd70a238bedca510acaa8e4 - Patch
References () https://git.kernel.org/stable/c/617e3d1680504a3f9d88e1582892c68be155498f - () https://git.kernel.org/stable/c/617e3d1680504a3f9d88e1582892c68be155498f - Patch
References () https://git.kernel.org/stable/c/a1955a6df91355fef72a3a254700acd3cc1fec0d - () https://git.kernel.org/stable/c/a1955a6df91355fef72a3a254700acd3cc1fec0d - Patch
CWE CWE-476
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/msm/a6xx: evite una desreferencia de nullptr cuando falla la configuración de speedbin. Llamar a a6xx_destroy() antes de adreno_gpu_init() conduce a una desreferencia de puntero nulo en: msm_gpu_cleanup() : platform_set_drvdata(gpu- >pdev, NULO); ya que gpu->pdev solo se asigna en: a6xx_gpu_init() |_ adreno_gpu_init |_ msm_gpu_init() En lugar de depender de comprobaciones nulas manuales en la cadena de limpieza, desasigne explícitamente los datos LLC y libere a6xx_gpu en su lugar. Remiendo: https://patchwork.freedesktop.org/patch/588919/

21 Jun 2024, 11:22

Type Values Removed Values Added
New CVE
Information

Published : 2024-06-21 11:15

Updated : 2024-09-09 13:38

NVD link : CVE-2024-38390

Mitre link : CVE-2024-38390

CVE.ORG link : CVE-2024-38390

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference