5.5
CVE-2024-50069
- EPSS 0.21%
- Veröffentlicht 29.10.2024 01:15:04
- Zuletzt bearbeitet 03.11.2025 23:16:46
- CVE-Watchlists
- Unerledigt
pinctrl: apple: check devm_kasprintf() returned value
In the Linux kernel, the following vulnerability has been resolved: pinctrl: apple: check devm_kasprintf() returned value devm_kasprintf() can return a NULL pointer on failure but this returned value is not checked. Fix this lack and check the returned value. Found by code review.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 5.16 < 6.1.114
Linux ≫ Linux Kernel Version >= 6.2 < 6.6.58
Linux ≫ Linux Kernel Version >= 6.7 < 6.11.5
Linux ≫ Linux Kernel Version6.12 Updaterc1
Linux ≫ Linux Kernel Version6.12 Updaterc2
Linux ≫ Linux Kernel Version6.12 Updaterc3
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.21% | 0.105 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.5 | 1.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 5.5 | 1.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
|
CWE-476 NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.
https://git.kernel.org/stable/c/0a4d4dbef622ac8796a6665e0080da2685f9220a
https://git.kernel.org/stable/c/4d2296fb7c80fdc9925d29a8e85d617cad08731a
https://git.kernel.org/stable/c/665a58fe663ac7a9ea618dc0b29881649324b116
https://git.kernel.org/stable/c/fad940e2dd789155f99ecafa71a7baf6f96530bc
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html