CVE-2024-53060

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-53060
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported acpi_evaluate_object() may return AE_NOT_FOUND (failure), which would result in dereferencing buffer.pointer (obj) while being NULL. Although this case may be unrealistic for the current code, it is still better to protect against possible bugs. Bail out also when status is AE_NOT_FOUND. This fixes 1 FORWARD_NULL issue reported by Coverity Report: CID 1600951: Null pointer dereferences (FORWARD_NULL) (cherry picked from commit 91c9e221fe2553edf2db71627d8453f083de87a1)

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/1a9f55ed5b512f510ccd21ad527d532e60550e80 Patch
https://git.kernel.org/stable/c/27fc29b5376998c126c85cf9b15d9dfc2afc9cbe Patch
https://git.kernel.org/stable/c/2ac7f253deada4d449559b65a1c1cd0a6f6f19b7 Patch
https://git.kernel.org/stable/c/8d7a28eca7553d35d4ce192fa1f390f2357df41b Patch
https://git.kernel.org/stable/c/a613a392417532ca5aaf3deac6e3277aa7aaef2b Patch
https://git.kernel.org/stable/c/a6dd15981c03f2cdc9a351a278f09b5479d53d2e Patch
https://git.kernel.org/stable/c/b9d9881237afeb52eddd70077b7174bf17e2fa30 Patch
https://git.kernel.org/stable/c/ce8a00a00e36f61f5a1e47734332420b68784c43 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc6:*:*:*:*:*:*
History

03 Dec 2024, 20:49

Type Values Removed Values Added
CWE CWE-476
First Time Linux linux Kernel
Linux
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/1a9f55ed5b512f510ccd21ad527d532e60550e80 - () https://git.kernel.org/stable/c/1a9f55ed5b512f510ccd21ad527d532e60550e80 - Patch
References () https://git.kernel.org/stable/c/27fc29b5376998c126c85cf9b15d9dfc2afc9cbe - () https://git.kernel.org/stable/c/27fc29b5376998c126c85cf9b15d9dfc2afc9cbe - Patch
References () https://git.kernel.org/stable/c/2ac7f253deada4d449559b65a1c1cd0a6f6f19b7 - () https://git.kernel.org/stable/c/2ac7f253deada4d449559b65a1c1cd0a6f6f19b7 - Patch
References () https://git.kernel.org/stable/c/8d7a28eca7553d35d4ce192fa1f390f2357df41b - () https://git.kernel.org/stable/c/8d7a28eca7553d35d4ce192fa1f390f2357df41b - Patch
References () https://git.kernel.org/stable/c/a613a392417532ca5aaf3deac6e3277aa7aaef2b - () https://git.kernel.org/stable/c/a613a392417532ca5aaf3deac6e3277aa7aaef2b - Patch
References () https://git.kernel.org/stable/c/a6dd15981c03f2cdc9a351a278f09b5479d53d2e - () https://git.kernel.org/stable/c/a6dd15981c03f2cdc9a351a278f09b5479d53d2e - Patch
References () https://git.kernel.org/stable/c/b9d9881237afeb52eddd70077b7174bf17e2fa30 - () https://git.kernel.org/stable/c/b9d9881237afeb52eddd70077b7174bf17e2fa30 - Patch
References () https://git.kernel.org/stable/c/ce8a00a00e36f61f5a1e47734332420b68784c43 - () https://git.kernel.org/stable/c/ce8a00a00e36f61f5a1e47734332420b68784c43 - Patch
CPE cpe:2.3:o:linux:linux_kernel:6.12:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc3:*:*:*:*:*:*

02 Dec 2024, 08:15

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/a6dd15981c03f2cdc9a351a278f09b5479d53d2e -

28 Nov 2024, 18:15

Type Values Removed Values Added
References
  • {'url': 'https://git.kernel.org/stable/c/a6dd15981c03f2cdc9a351a278f09b5479d53d2e', 'source': '416baaa9-dc9f-4396-8d5f-8c081fb06d67'}
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/amdgpu: evitar la desreferenciación de punteros NULL si no se admite ATIF acpi_evaluate_object() puede devolver AE_NOT_FOUND (error), lo que provocaría la desreferenciación de buffer.pointer (obj) mientras sea NULL. Aunque este caso puede ser poco realista para el código actual, sigue siendo mejor protegerse contra posibles errores. También se debe abandonar cuando el estado sea AE_NOT_FOUND. Esto soluciona 1 problema de FORWARD_NULL informado por Coverity Report: CID 1600951: Desreferencias de punteros nulos (FORWARD_NULL) (seleccionado de el commit 91c9e221fe2553edf2db71627d8453f083de87a1)

19 Nov 2024, 18:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-11-19 18:15

Updated : 2024-12-03 20:49

NVD link : CVE-2024-53060

Mitre link : CVE-2024-53060

CVE.ORG link : CVE-2024-53060

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference