CVE-2024-38546

In the Linux kernel, the following vulnerability has been resolved: drm: vc4: Fix possible null pointer dereference In vc4_hdmi_audio_init() of_get_address() may return NULL which is later dereferenced. Fix this bug by adding NULL check. Found by Linux Verification Center (linuxtesting.org) with SVACE.

CVSS v3 5.5 MEDIUM

5.5^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://git.kernel.org/stable/c/2a345fe928c21de6f3c3c7230ff509d715153a31	Patch
https://git.kernel.org/stable/c/2d9adecc88ab678785b581ab021f039372c324cb	Patch
https://git.kernel.org/stable/c/42c22b63056cea259d5313bf138a834840af85a5	Patch
https://git.kernel.org/stable/c/6cf1874aec42058a5ad621a23b5b2f248def0e96	Patch
https://git.kernel.org/stable/c/80431ea3634efb47a3004305d76486db9dd8ed49	Patch
https://git.kernel.org/stable/c/bd7827d46d403f8cdb43d16744cb1114e4726b21	Patch
https://git.kernel.org/stable/c/c534b63bede6cb987c2946ed4d0b0013a52c5ba7	Patch

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::

History

27 Aug 2024, 20:03

Type	Values Removed	Values Added
CPE		cpe:2.3:o:linux:linux_kernel::::::::
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 5.5
CWE		CWE-476
First Time		Linux Linux linux Kernel
References	~~() https://git.kernel.org/stable/c/2a345fe928c21de6f3c3c7230ff509d715153a31 -~~	() https://git.kernel.org/stable/c/2a345fe928c21de6f3c3c7230ff509d715153a31 - Patch
References	~~() https://git.kernel.org/stable/c/2d9adecc88ab678785b581ab021f039372c324cb -~~	() https://git.kernel.org/stable/c/2d9adecc88ab678785b581ab021f039372c324cb - Patch
References	~~() https://git.kernel.org/stable/c/42c22b63056cea259d5313bf138a834840af85a5 -~~	() https://git.kernel.org/stable/c/42c22b63056cea259d5313bf138a834840af85a5 - Patch
References	~~() https://git.kernel.org/stable/c/6cf1874aec42058a5ad621a23b5b2f248def0e96 -~~	() https://git.kernel.org/stable/c/6cf1874aec42058a5ad621a23b5b2f248def0e96 - Patch
References	~~() https://git.kernel.org/stable/c/80431ea3634efb47a3004305d76486db9dd8ed49 -~~	() https://git.kernel.org/stable/c/80431ea3634efb47a3004305d76486db9dd8ed49 - Patch
References	~~() https://git.kernel.org/stable/c/bd7827d46d403f8cdb43d16744cb1114e4726b21 -~~	() https://git.kernel.org/stable/c/bd7827d46d403f8cdb43d16744cb1114e4726b21 - Patch
References	~~() https://git.kernel.org/stable/c/c534b63bede6cb987c2946ed4d0b0013a52c5ba7 -~~	() https://git.kernel.org/stable/c/c534b63bede6cb987c2946ed4d0b0013a52c5ba7 - Patch

20 Jun 2024, 12:44

Type	Values Removed	Values Added
Summary		(es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm: vc4: corrige posible desreferencia del puntero nulo En vc4_hdmi_audio_init() of_get_address() puede devolver NULL, que luego se desreferencia. Corrija este error agregando una verificación NULL. Encontrado por el Centro de verificación de Linux (linuxtesting.org) con SVACE.

19 Jun 2024, 14:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-06-19 14:15

Updated : 2024-08-27 20:03

NVD link : CVE-2024-38546

Mitre link : CVE-2024-38546

CVE.ORG link : CVE-2024-38546

JSON object : View

Products Affected

linux

linux_kernel

CWE

CWE-476

NULL Pointer Dereference

5.5 /10