PT-2024-8481 · Linux+5 · Linux Kernel+5
Huai-Yuan Liu
·
Published
2024-04-03
·
Updated
2025-03-28
·
CVE-2024-35883
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to a potential null pointer dereference in the
pci1xxx spi probe function, which may be caused by a failed memory allocation by the devm kzalloc function. To fix this issue, a null pointer check needs to be added to prevent null pointer dereferencing later in the code. The memory allocated by devm kzalloc will be automatically released.Recommendations
To resolve the issue, check
spi bus->spi int[iter] and directly return -ENOMEM without worrying about memory leaks. As a temporary workaround, consider adding a null pointer check in the pci1xxx spi probe function to prevent null pointer dereferencing.Exploit
Fix
NULL Pointer Dereference
Memory Leak
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu