CVE-2024-40973

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-40973
In the Linux kernel, the following vulnerability has been resolved: media: mtk-vcodec: potential null pointer deference in SCP The return value of devm_kzalloc() needs to be checked to avoid NULL pointer deference. This is similar to CVE-2022-3113.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/3a693c7e243b932faee5c1fb728efa73f0abc39b Patch
https://git.kernel.org/stable/c/53dbe08504442dc7ba4865c09b3bbf5fe849681b Patch
https://git.kernel.org/stable/c/eeb62bb4ca22db17f7dfe8fb8472e0442df3d92f
https://git.kernel.org/stable/c/f066882293b5ad359e44c4ed24ab1811ffb0b354 Patch
https://git.kernel.org/stable/c/3a693c7e243b932faee5c1fb728efa73f0abc39b Patch
https://git.kernel.org/stable/c/53dbe08504442dc7ba4865c09b3bbf5fe849681b Patch
https://git.kernel.org/stable/c/f066882293b5ad359e44c4ed24ab1811ffb0b354 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

07 Mar 2025, 18:15

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/eeb62bb4ca22db17f7dfe8fb8472e0442df3d92f -

21 Nov 2024, 09:31

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/3a693c7e243b932faee5c1fb728efa73f0abc39b - Patch () https://git.kernel.org/stable/c/3a693c7e243b932faee5c1fb728efa73f0abc39b - Patch
References () https://git.kernel.org/stable/c/53dbe08504442dc7ba4865c09b3bbf5fe849681b - Patch () https://git.kernel.org/stable/c/53dbe08504442dc7ba4865c09b3bbf5fe849681b - Patch
References () https://git.kernel.org/stable/c/f066882293b5ad359e44c4ed24ab1811ffb0b354 - Patch () https://git.kernel.org/stable/c/f066882293b5ad359e44c4ed24ab1811ffb0b354 - Patch

09 Sep 2024, 18:09

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/3a693c7e243b932faee5c1fb728efa73f0abc39b - () https://git.kernel.org/stable/c/3a693c7e243b932faee5c1fb728efa73f0abc39b - Patch
References () https://git.kernel.org/stable/c/53dbe08504442dc7ba4865c09b3bbf5fe849681b - () https://git.kernel.org/stable/c/53dbe08504442dc7ba4865c09b3bbf5fe849681b - Patch
References () https://git.kernel.org/stable/c/f066882293b5ad359e44c4ed24ab1811ffb0b354 - () https://git.kernel.org/stable/c/f066882293b5ad359e44c4ed24ab1811ffb0b354 - Patch
First Time Linux linux Kernel
Linux
CWE CWE-476
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: medio: mtk-vcodec: posible deferencia de puntero nulo en SCP Es necesario verificar el valor de retorno de devm_kzalloc() para evitar la deferencia de puntero NULL. Esto es similar a CVE-2022-3113.

12 Jul 2024, 13:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-07-12 13:15

Updated : 2025-03-07 18:15

NVD link : CVE-2024-40973

Mitre link : CVE-2024-40973

CVE.ORG link : CVE-2024-40973

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference