PT-2024-21881 · Linux+4 · Linux Kernel+4
Published
2024-02-15
·
Updated
2025-12-17
·
CVE-2024-27412
CVSS v2.0
7.5
High
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue arises when the bq27xxx i2c-client does not have an IRQ, resulting in
client->irq being 0. The bq27xxx battery i2c probe() function checks for client->irq before calling request threaded irq(), but bq27xxx battery i2c remove() unconditionally calls free irq(client->irq), leading to a warning about trying to free an already-free IRQ 0 and a subsequent backtrace when unbinding the driver. To fix this, an if (client->irq) check should be added to bq27xxx battery i2c remove() to mirror the check in bq27xxx battery i2c probe().Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Suse
Ubuntu