CVE-2024-43875

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-43875
In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Clean up error handling in vpci_scan_bus() Smatch complains about inconsistent NULL checking in vpci_scan_bus(): drivers/pci/endpoint/functions/pci-epf-vntb.c:1024 vpci_scan_bus() error: we previously assumed 'vpci_bus' could be null (see line 1021) Instead of printing an error message and then crashing we should return an error code and clean up. Also the NULL check is reversed so it prints an error for success instead of failure.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/0e27e2e8697b8ce96cdef43f135426525d9d1f8f Patch
https://git.kernel.org/stable/c/24414c842a24d0fd498f9db6d2a762a8dddf1832 Patch
https://git.kernel.org/stable/c/7d368de78b60088ec9031c60c88976c0063ea4c0 Patch
https://git.kernel.org/stable/c/8e0f5a96c534f781e8c57ca30459448b3bfe5429 Patch
https://git.kernel.org/stable/c/b9e8695246bcfc028341470cbf92630cdc1ba36b Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

26 Sep 2025, 18:36

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/0e27e2e8697b8ce96cdef43f135426525d9d1f8f - () https://git.kernel.org/stable/c/0e27e2e8697b8ce96cdef43f135426525d9d1f8f - Patch
References () https://git.kernel.org/stable/c/24414c842a24d0fd498f9db6d2a762a8dddf1832 - () https://git.kernel.org/stable/c/24414c842a24d0fd498f9db6d2a762a8dddf1832 - Patch
References () https://git.kernel.org/stable/c/7d368de78b60088ec9031c60c88976c0063ea4c0 - () https://git.kernel.org/stable/c/7d368de78b60088ec9031c60c88976c0063ea4c0 - Patch
References () https://git.kernel.org/stable/c/8e0f5a96c534f781e8c57ca30459448b3bfe5429 - () https://git.kernel.org/stable/c/8e0f5a96c534f781e8c57ca30459448b3bfe5429 - Patch
References () https://git.kernel.org/stable/c/b9e8695246bcfc028341470cbf92630cdc1ba36b - () https://git.kernel.org/stable/c/b9e8695246bcfc028341470cbf92630cdc1ba36b - Patch
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: PCI: endpoint: limpieza del manejo de errores en vpci_scan_bus() Smatch se queja de una verificación NULL inconsistente en vpci_scan_bus(): drivers/pci/endpoint/functions/pci-epf-vntb.c :1024 Error de vpci_scan_bus(): anteriormente asumimos que 'vpci_bus' podría ser nulo (consulte la línea 1021). En lugar de imprimir un mensaje de error y luego fallar, deberíamos devolver un código de error y limpiar. Además, la verificación NULL se invierte, por lo que imprime un error de éxito en lugar de fracaso.
CWE CWE-476
First Time Linux linux Kernel
Linux
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

21 Aug 2024, 01:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-08-21 01:15

Updated : 2025-09-26 18:36

NVD link : CVE-2024-43875

Mitre link : CVE-2024-43875

CVE.ORG link : CVE-2024-43875

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference