PT-2024-34069 · Linux+3 · Linux Kernel+3

Johan Hovold · Published 2024-10-17 · Updated 2025-09-29 · CVE-2024-50238

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: A vulnerability in the Linux kernel has been resolved, specifically in the phy: qcom: qmp-usbc driver. The issue was caused by a commit that removed the initialisation of the platform device driver data, despite it still being used in the runtime PM callbacks. This led to a NULL-pointer dereference on runtime suspend. The bug was reproduced when the driver was copied to create the qmp-usbc driver. The fix involves restoring the driver data initialisation at probe. It is noted that runtime PM is not commonly used and needs to be enabled manually through sysfs.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALSA-2025_16880

ALT-PU-2024-17211

BDU:2025-14140

CVE-2024-50238

OPENSUSE-SU-2024:14500-1

OPENSUSE-SU-2025:14705-1

USN-7276-1

USN-7277-1

USN-7310-1

USN-7449-1

USN-7449-2

USN-7450-1

USN-7451-1

USN-7452-1

USN-7453-1

USN-7468-1

USN-7523-1

USN-7524-1

Affected Products

Alt Linux

Linuxmint

Linux Kernel

Ubuntu

References · 1596

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/50xxx/CVE-2024-50238.json · Exploit
• https://ubuntu.com/security/CVE-2024-53166 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50059 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56602 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56594 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50185 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50016 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-49943 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50249 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50211 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-49907 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-49868 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50205 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50151 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50277 · Vendor Advisory