CVE-2024-42248

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-42248
In the Linux kernel, the following vulnerability has been resolved: tty: serial: ma35d1: Add a NULL check for of_node The pdev->dev.of_node can be NULL if the "serial" node is absent. Add a NULL check to return an error in such cases.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/0e0e15ab2d3a094a38525d23c03d78ec7d14a40e Patch
https://git.kernel.org/stable/c/23efa74cfe6eb923abb5b9bc51b2a04879013c67 Patch
https://git.kernel.org/stable/c/acd09ac253b5de8fd79fc61a482ee19154914c7a Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

08 Aug 2024, 20:55

Type Values Removed Values Added
CWE CWE-476
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux
Linux linux Kernel
References () https://git.kernel.org/stable/c/0e0e15ab2d3a094a38525d23c03d78ec7d14a40e - () https://git.kernel.org/stable/c/0e0e15ab2d3a094a38525d23c03d78ec7d14a40e - Patch
References () https://git.kernel.org/stable/c/23efa74cfe6eb923abb5b9bc51b2a04879013c67 - () https://git.kernel.org/stable/c/23efa74cfe6eb923abb5b9bc51b2a04879013c67 - Patch
References () https://git.kernel.org/stable/c/acd09ac253b5de8fd79fc61a482ee19154914c7a - () https://git.kernel.org/stable/c/acd09ac253b5de8fd79fc61a482ee19154914c7a - Patch
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: tty: serial: ma35d1: agregue una verificación NULL para of_node El pdev->dev.of_node puede ser NULL si el nodo "serial" está ausente. Agregue una verificación NULL para devolver un error en tales casos.

07 Aug 2024, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-08-07 16:15

Updated : 2024-08-08 20:55

NVD link : CVE-2024-42248

Mitre link : CVE-2024-42248

CVE.ORG link : CVE-2024-42248

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference