CVE-2024-35984

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-35984
In the Linux kernel, the following vulnerability has been resolved: i2c: smbus: fix NULL function pointer dereference Baruch reported an OOPS when using the designware controller as target only. Target-only modes break the assumption of one transfer function always being available. Fix this by always checking the pointer in __i2c_transfer. [wsa: dropped the simplification in core-smbus to avoid theoretical regressions]

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/357c64ef1ef39b1e7cd91ab6bdd304d043702c83 Patch
https://git.kernel.org/stable/c/40f1d79f07b49c8a64a861706e5163f2db4bd95d Patch
https://git.kernel.org/stable/c/4e75e222d397c6752b229ed72fc4644c8c36ecde Patch
https://git.kernel.org/stable/c/5a09eae9a7db597fe0c1fc91636205b4a25d2620 Patch
https://git.kernel.org/stable/c/5fd72404587d7db4acb2d241fd8c387afb0a7aec Patch
https://git.kernel.org/stable/c/91811a31b68d3765b3065f4bb6d7d6d84a7cfc9f Patch
https://git.kernel.org/stable/c/ad3c3ac7a03be3697114f781193dd3e9d97e6e23 Patch
https://git.kernel.org/stable/c/e3425674ff68dc521c57c6eabad0cbd20a027d85 Patch
https://git.kernel.org/stable/c/357c64ef1ef39b1e7cd91ab6bdd304d043702c83 Patch
https://git.kernel.org/stable/c/40f1d79f07b49c8a64a861706e5163f2db4bd95d Patch
https://git.kernel.org/stable/c/4e75e222d397c6752b229ed72fc4644c8c36ecde Patch
https://git.kernel.org/stable/c/5a09eae9a7db597fe0c1fc91636205b4a25d2620 Patch
https://git.kernel.org/stable/c/5fd72404587d7db4acb2d241fd8c387afb0a7aec Patch
https://git.kernel.org/stable/c/91811a31b68d3765b3065f4bb6d7d6d84a7cfc9f Patch
https://git.kernel.org/stable/c/ad3c3ac7a03be3697114f781193dd3e9d97e6e23 Patch
https://git.kernel.org/stable/c/e3425674ff68dc521c57c6eabad0cbd20a027d85 Patch
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html
https://cert-portal.siemens.com/productcert/html/ssa-265688.html
https://cert-portal.siemens.com/productcert/html/ssa-613116.html
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

12 May 2026, 12:16

Type Values Removed Values Added
References
  • () https://cert-portal.siemens.com/productcert/html/ssa-265688.html -
  • () https://cert-portal.siemens.com/productcert/html/ssa-613116.html -

21 Nov 2024, 09:21

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html -
  • () https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html -
References () https://git.kernel.org/stable/c/357c64ef1ef39b1e7cd91ab6bdd304d043702c83 - Patch () https://git.kernel.org/stable/c/357c64ef1ef39b1e7cd91ab6bdd304d043702c83 - Patch
References () https://git.kernel.org/stable/c/40f1d79f07b49c8a64a861706e5163f2db4bd95d - Patch () https://git.kernel.org/stable/c/40f1d79f07b49c8a64a861706e5163f2db4bd95d - Patch
References () https://git.kernel.org/stable/c/4e75e222d397c6752b229ed72fc4644c8c36ecde - Patch () https://git.kernel.org/stable/c/4e75e222d397c6752b229ed72fc4644c8c36ecde - Patch
References () https://git.kernel.org/stable/c/5a09eae9a7db597fe0c1fc91636205b4a25d2620 - Patch () https://git.kernel.org/stable/c/5a09eae9a7db597fe0c1fc91636205b4a25d2620 - Patch
References () https://git.kernel.org/stable/c/5fd72404587d7db4acb2d241fd8c387afb0a7aec - Patch () https://git.kernel.org/stable/c/5fd72404587d7db4acb2d241fd8c387afb0a7aec - Patch
References () https://git.kernel.org/stable/c/91811a31b68d3765b3065f4bb6d7d6d84a7cfc9f - Patch () https://git.kernel.org/stable/c/91811a31b68d3765b3065f4bb6d7d6d84a7cfc9f - Patch
References () https://git.kernel.org/stable/c/ad3c3ac7a03be3697114f781193dd3e9d97e6e23 - Patch () https://git.kernel.org/stable/c/ad3c3ac7a03be3697114f781193dd3e9d97e6e23 - Patch
References () https://git.kernel.org/stable/c/e3425674ff68dc521c57c6eabad0cbd20a027d85 - Patch () https://git.kernel.org/stable/c/e3425674ff68dc521c57c6eabad0cbd20a027d85 - Patch

05 Nov 2024, 10:17

Type Values Removed Values Added
References
  • {'url': 'https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html', 'source': '416baaa9-dc9f-4396-8d5f-8c081fb06d67'}
  • {'url': 'https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html', 'source': '416baaa9-dc9f-4396-8d5f-8c081fb06d67'}

27 Jun 2024, 12:15

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html -

25 Jun 2024, 22:15

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html -

23 May 2024, 21:04

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux linux Kernel
Linux
References () https://git.kernel.org/stable/c/357c64ef1ef39b1e7cd91ab6bdd304d043702c83 - () https://git.kernel.org/stable/c/357c64ef1ef39b1e7cd91ab6bdd304d043702c83 - Patch
References () https://git.kernel.org/stable/c/40f1d79f07b49c8a64a861706e5163f2db4bd95d - () https://git.kernel.org/stable/c/40f1d79f07b49c8a64a861706e5163f2db4bd95d - Patch
References () https://git.kernel.org/stable/c/4e75e222d397c6752b229ed72fc4644c8c36ecde - () https://git.kernel.org/stable/c/4e75e222d397c6752b229ed72fc4644c8c36ecde - Patch
References () https://git.kernel.org/stable/c/5a09eae9a7db597fe0c1fc91636205b4a25d2620 - () https://git.kernel.org/stable/c/5a09eae9a7db597fe0c1fc91636205b4a25d2620 - Patch
References () https://git.kernel.org/stable/c/5fd72404587d7db4acb2d241fd8c387afb0a7aec - () https://git.kernel.org/stable/c/5fd72404587d7db4acb2d241fd8c387afb0a7aec - Patch
References () https://git.kernel.org/stable/c/91811a31b68d3765b3065f4bb6d7d6d84a7cfc9f - () https://git.kernel.org/stable/c/91811a31b68d3765b3065f4bb6d7d6d84a7cfc9f - Patch
References () https://git.kernel.org/stable/c/ad3c3ac7a03be3697114f781193dd3e9d97e6e23 - () https://git.kernel.org/stable/c/ad3c3ac7a03be3697114f781193dd3e9d97e6e23 - Patch
References () https://git.kernel.org/stable/c/e3425674ff68dc521c57c6eabad0cbd20a027d85 - () https://git.kernel.org/stable/c/e3425674ff68dc521c57c6eabad0cbd20a027d85 - Patch
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: i2c: smbus: corrige la desreferencia del puntero de función NULL. Baruch informó de un OOPS al usar el controlador de designware como destino únicamente. Los modos de solo objetivo rompen el supuesto de que siempre hay una función de transferencia disponible. Solucione este problema comprobando siempre el puntero en __i2c_transfer. [wsa: abandonó la simplificación en core-smbus para evitar regresiones teóricas]
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE CWE-476

20 May 2024, 10:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-20 10:15

Updated : 2026-05-12 12:16

NVD link : CVE-2024-35984

Mitre link : CVE-2024-35984

CVE.ORG link : CVE-2024-35984

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference