5.5

CVE-2024-46769

spi: intel: Add check devm_kasprintf() returned value

In the Linux kernel, the following vulnerability has been resolved:

spi: intel: Add check devm_kasprintf() returned value

intel_spi_populate_chip() use devm_kasprintf() to set pdata->name.
This can return a NULL pointer on failure but this returned value
is not checked.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 6.9 < 6.10.10
Linux ≫ Linux Kernel Version 6.11 Update rc1
Linux ≫ Linux Kernel Version 6.11 Update rc2
Linux ≫ Linux Kernel Version 6.11 Update rc3
Linux ≫ Linux Kernel Version 6.11 Update rc4
Linux ≫ Linux Kernel Version 6.11 Update rc5
Linux ≫ Linux Kernel Version 6.11 Update rc6
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.2% 0.103
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

https://git.kernel.org/stable/c/2920294686ec23211637998f3ec386dfd3d784a6
Patch
https://git.kernel.org/stable/c/6e68abdc5d674f9f4185bf1e1956368d05df4838
Patch