PT-2024-9062 · Linux+5 · Linux Kernel+5

Published 2024-03-28 · Updated 2025-02-03 · CVE-2024-38550

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The issue is related to a potential NULL dereference in the kirkwood dma hw params() function. This occurs when mv mbus dram info() returns NULL if the CONFIG PLAT ORION macro is not defined. The problem can be fixed by adding a NULL check. This issue may allow an attacker to cause a denial of service.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2024-10744

CVE-2024-38550

MGASA-2024-0263

MGASA-2024-0266

OESA-2024-2076

OPENSUSE-SU-2024_2372-1

OPENSUSE-SU-2024_2394-1

SUSE-SU-2024:2372-1

SUSE-SU-2024:2394-1

SUSE-SU-2024:2571-1

SUSE-SU-2024:2896-1

SUSE-SU-2024:2939-1

SUSE-SU-2024:2973-1

SUSE-SU-2025:20008-1

SUSE-SU-2025:20028-1

USN-6949-1

USN-6949-2

USN-6952-1

USN-6952-2

USN-6955-1

USN-7007-1

USN-7007-2

USN-7007-3

USN-7009-1

USN-7009-2

USN-7019-1

Affected Products

Astra Linux

Linuxmint

Linux Kernel

Red Os

Suse

Ubuntu

References · 3316

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/38xxx/CVE-2024-38550.json · Exploit
• https://ubuntu.com/security/CVE-2024-36891 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-40984 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-41002 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-39504 · Security Note
• https://ubuntu.com/security/CVE-2024-41087 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-41054 · Security Note
• https://ubuntu.com/security/CVE-2024-35858 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6949-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-43863 · Security Note
• https://ubuntu.com/security/CVE-2024-36489 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-41084 · Security Note
• https://ubuntu.com/security/CVE-2024-26970 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-38596 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26966 · Vendor Advisory