CVE-2024-38622

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-38622
In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Add callback function pointer check before its call In dpu_core_irq_callback_handler() callback function pointer is compared to NULL, but then callback function is unconditionally called by this pointer. Fix this bug by adding conditional return. Found by Linux Verification Center (linuxtesting.org) with SVACE. Patchwork: https://patchwork.freedesktop.org/patch/588237/

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/530f272053a5e72243a9cb07bb1296af6c346002 Patch
https://git.kernel.org/stable/c/873f67699114452c2a996c4e10faac8ff860c241 Patch
https://git.kernel.org/stable/c/9078630ed7f8f25d65d11823e7f2b11a8e2f4f0f Patch
https://git.kernel.org/stable/c/530f272053a5e72243a9cb07bb1296af6c346002 Patch
https://git.kernel.org/stable/c/873f67699114452c2a996c4e10faac8ff860c241 Patch
https://git.kernel.org/stable/c/9078630ed7f8f25d65d11823e7f2b11a8e2f4f0f Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

17 Sep 2025, 16:59

Type Values Removed Values Added
CWE CWE-476
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux linux Kernel
Linux
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/530f272053a5e72243a9cb07bb1296af6c346002 - () https://git.kernel.org/stable/c/530f272053a5e72243a9cb07bb1296af6c346002 - Patch
References () https://git.kernel.org/stable/c/873f67699114452c2a996c4e10faac8ff860c241 - () https://git.kernel.org/stable/c/873f67699114452c2a996c4e10faac8ff860c241 - Patch
References () https://git.kernel.org/stable/c/9078630ed7f8f25d65d11823e7f2b11a8e2f4f0f - () https://git.kernel.org/stable/c/9078630ed7f8f25d65d11823e7f2b11a8e2f4f0f - Patch

21 Nov 2024, 09:26

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/530f272053a5e72243a9cb07bb1296af6c346002 - () https://git.kernel.org/stable/c/530f272053a5e72243a9cb07bb1296af6c346002 -
References () https://git.kernel.org/stable/c/873f67699114452c2a996c4e10faac8ff860c241 - () https://git.kernel.org/stable/c/873f67699114452c2a996c4e10faac8ff860c241 -
References () https://git.kernel.org/stable/c/9078630ed7f8f25d65d11823e7f2b11a8e2f4f0f - () https://git.kernel.org/stable/c/9078630ed7f8f25d65d11823e7f2b11a8e2f4f0f -
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/msm/dpu: agregar verificación del puntero de la función de devolución de llamada antes de su llamada. En dpu_core_irq_callback_handler(), el puntero de la función de devolución de llamada se compara con NULL, pero luego este puntero llama incondicionalmente a la función de devolución de llamada. Corrija este error agregando devolución condicional. Encontrado por el Centro de verificación de Linux (linuxtesting.org) con SVACE. Remiendo: https://patchwork.freedesktop.org/patch/588237/

21 Jun 2024, 11:22

Type Values Removed Values Added
New CVE
Information

Published : 2024-06-21 11:15

Updated : 2025-09-17 16:59

NVD link : CVE-2024-38622

Mitre link : CVE-2024-38622

CVE.ORG link : CVE-2024-38622

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference