Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Amit Pundir

Researcher fromLinaro
#50407of 53,632
4.7Total CVSS
Vulnerabilities · 1
PT-2024-32121
4.7
2024-08-21
Linux · Linux Kernel · CVE-2024-46693
**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** The issue is related to a race condition during the initialization of the pmic glink child drivers in the Linux kernel. As pointed out by Stephen Boyd, the protection-domain notifiers may fire and schedule associated work before the client registration returns, resulting in a NULL pointer dereference as the `client` pointer is blindly dereferenced. This occurs when the protection domain registry is populated at the time of registration, which became more likely with the introduction of the commit '1ebcde047c54 ("soc: qcom: add pd-mapper implementation")'. The vulnerable code is identical across the altmode, battery manager, and usci child drivers. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.