PT-2024-29770 · Linux+5 · Linux Kernel+5

Published

2024-05-02

·

Updated

2025-09-29

·

CVE-2024-42144

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.43
Description A vulnerability in the Linux kernel has been resolved, specifically in the thermal/drivers/mediatek/lvts thermal module. The issue involved a NULL pointer check on lvts data, where it was necessary to verify that lvts data is not NULL before using it.
Recommendations For versions prior to 6.6.43, update to version 6.6.43 or later to resolve the issue. As a temporary workaround, consider implementing checks to ensure that lvts data is not NULL before using it in the thermal/drivers/mediatek/lvts thermal module.

Exploit

Fix

NULL Pointer Dereference

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-476

Related Identifiers

ALSA-2025_16880
ALT-PU-2024-13979
ALT-PU-2024-14046
AZL-49316
BDU:2025-02979
CVE-2024-42144
MGASA-2024-0277
MGASA-2024-0278
OESA-2024-2076
SUSE-SU-2024:3194-1
SUSE-SU-2024:3195-1
SUSE-SU-2024:3383-1
SUSE-SU-2025:20044-1
SUSE-SU-2025:20047-1
USN-7089-1
USN-7089-2
USN-7089-3
USN-7089-4
USN-7089-5
USN-7089-6
USN-7089-7
USN-7090-1
USN-7095-1
USN-7156-1

Affected Products

Alt Linux
Astra Linux
Linuxmint
Linux Kernel
Suse
Ubuntu