CVE-2024-56634
gpio: grgpio: Add NULL check in grgpio_probe
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
CISA's decision points: whether it is exploited, whether attacks can be automated, and how much control an attacker gets. Assessed (SSVC 2.0.3).What do these mean? →
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
In the Linux kernel, the following vulnerability has been resolved: gpio: grgpio: Add NULL check in grgpio_probe devm_kasprintf() can return a NULL pointer on failure,but this returned value in grgpio_probe is not checked. Add NULL check in grgpio_probe, to handle kernel NULL pointer dereference error.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- Linux Linux
Version range not reported
- Linux Linux
4.14
References 7
git.kernel.org
- stable/c/53ff0caa6ad57372d426b4f48fc0f66df43a731f
- stable/c/4733f68e59bb7b9e3d395699abb18366954b9ba7
- stable/c/ad4dfa7ea7f5f7e9a3c78627cfc749bc7005ca7a
- stable/c/09adf8792b61c09ae543972a1ece1884ef773848
- stable/c/8d2ca6ac3711a4f4015d26b7cc84f325ac608edb
- stable/c/db2fc255fcf41f536ac8666409849e11659af88d
- stable/c/050b23d081da0f29474de043e9538c1f7a351b3b