CVE-2024-35916

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-35916
In the Linux kernel, the following vulnerability has been resolved: dma-buf: Fix NULL pointer dereference in sanitycheck() If due to a memory allocation failure mock_chain() returns NULL, it is passed to dma_fence_enable_sw_signaling() resulting in NULL pointer dereference there. Call dma_fence_enable_sw_signaling() only if mock_chain() succeeds. Found by Linux Verification Center (linuxtesting.org) with SVACE.

5.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/0336995512cdab0c65e99e4cdd47c4606debe14e Patch
https://git.kernel.org/stable/c/156c226cbbdcf5f3bce7b2408a33b59fab7fae2c Patch
https://git.kernel.org/stable/c/2295bd846765c766701e666ed2e4b35396be25e6 Patch
https://git.kernel.org/stable/c/eabf131cba1db12005a68378305f13b9090a7a6b Patch
https://git.kernel.org/stable/c/0336995512cdab0c65e99e4cdd47c4606debe14e Patch
https://git.kernel.org/stable/c/156c226cbbdcf5f3bce7b2408a33b59fab7fae2c Patch
https://git.kernel.org/stable/c/2295bd846765c766701e666ed2e4b35396be25e6 Patch
https://git.kernel.org/stable/c/eabf131cba1db12005a68378305f13b9090a7a6b Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
History

04 Apr 2025, 14:24

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux linux Kernel
Linux
CWE CWE-476
References () https://git.kernel.org/stable/c/0336995512cdab0c65e99e4cdd47c4606debe14e - () https://git.kernel.org/stable/c/0336995512cdab0c65e99e4cdd47c4606debe14e - Patch
References () https://git.kernel.org/stable/c/156c226cbbdcf5f3bce7b2408a33b59fab7fae2c - () https://git.kernel.org/stable/c/156c226cbbdcf5f3bce7b2408a33b59fab7fae2c - Patch
References () https://git.kernel.org/stable/c/2295bd846765c766701e666ed2e4b35396be25e6 - () https://git.kernel.org/stable/c/2295bd846765c766701e666ed2e4b35396be25e6 - Patch
References () https://git.kernel.org/stable/c/eabf131cba1db12005a68378305f13b9090a7a6b - () https://git.kernel.org/stable/c/eabf131cba1db12005a68378305f13b9090a7a6b - Patch

21 Nov 2024, 09:21

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/0336995512cdab0c65e99e4cdd47c4606debe14e - () https://git.kernel.org/stable/c/0336995512cdab0c65e99e4cdd47c4606debe14e -
References () https://git.kernel.org/stable/c/156c226cbbdcf5f3bce7b2408a33b59fab7fae2c - () https://git.kernel.org/stable/c/156c226cbbdcf5f3bce7b2408a33b59fab7fae2c -
References () https://git.kernel.org/stable/c/2295bd846765c766701e666ed2e4b35396be25e6 - () https://git.kernel.org/stable/c/2295bd846765c766701e666ed2e4b35396be25e6 -
References () https://git.kernel.org/stable/c/eabf131cba1db12005a68378305f13b9090a7a6b - () https://git.kernel.org/stable/c/eabf131cba1db12005a68378305f13b9090a7a6b -

07 Nov 2024, 20:35

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: dma-buf: corrige la desreferencia del puntero NULL en sanitycheck(). Si debido a un error en la asignación de memoria, mock_chain() devuelve NULL, se pasa a dma_fence_enable_sw_signaling(), lo que genera una desreferencia del puntero NULL allí. . Llame a dma_fence_enable_sw_signaling() solo si mock_chain() tiene éxito. Encontrado por el Centro de verificación de Linux (linuxtesting.org) con SVACE.
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.3

19 May 2024, 09:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-19 09:15

Updated : 2025-04-04 14:24

NVD link : CVE-2024-35916

Mitre link : CVE-2024-35916

CVE.ORG link : CVE-2024-35916

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference