5.5

CVE-2024-47756

PCI: keystone: Fix if-statement expression in ks_pcie_quirk()

In the Linux kernel, the following vulnerability has been resolved:

PCI: keystone: Fix if-statement expression in ks_pcie_quirk()

This code accidentally uses && where || was intended.  It potentially
results in a NULL dereference.

Thus, fix the if-statement expression to use the correct condition.

[kwilczynski: commit log]
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 5.4.284 < 5.5
Linux ≫ Linux Kernel Version >= 6.1.110 < 6.1.113
Linux ≫ Linux Kernel Version >= 6.6.51 < 6.6.54
Linux ≫ Linux Kernel Version >= 6.10.10 < 6.10.13
Linux ≫ Linux Kernel Version >= 6.11 < 6.11.2
Linux ≫ Linux Kernel Version5.10.226
Linux ≫ Linux Kernel Version5.15.167
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.22% 0.121
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

https://git.kernel.org/stable/c/2171c5cb2fbc3e03af7e8116cd58736c09328655
Patch
https://git.kernel.org/stable/c/23838bef2adb714ec37b2d6141dccf4a3a70bdef
Patch
https://git.kernel.org/stable/c/6188a1c762eb9bbd444f47696eda77a5eae6207a
Patch
https://git.kernel.org/stable/c/72210e52e19a27f615e0b5273d2bf012d0dc318d
Patch
https://git.kernel.org/stable/c/9c9afc3e75069fcfb067727973242cfbf00dd7eb
https://git.kernel.org/stable/c/c289903b7a216df5ea6e1850ddf1b958eea9921d
Patch
https://git.kernel.org/stable/c/dc5aeba07395c8dfa29bb878c8ce4d5180427221
Patch
https://git.kernel.org/stable/c/e85ab507882db165c10a858d7f685a0a38f0312e
Patch
https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html