CVE-2024-56682

In the Linux kernel, the following vulnerability has been resolved: irqchip/riscv-aplic: Prevent crash when MSI domain is missing If the APLIC driver is probed before the IMSIC driver, the parent MSI domain will be missing, which causes a NULL pointer dereference in msi_create_device_irq_domain(). Avoid this by deferring probe until the parent MSI domain is available. Use dev_err_probe() to avoid printing an error message when returning -EPROBE_DEFER.
Configurations

Configuration 1 (hide)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

History

14 Jan 2025, 15:44

Type Values Removed Values Added
CWE CWE-476
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: irqchip/riscv-aplic: evitar un bloqueo cuando falta el dominio MSI Si se prueba el controlador APLIC antes que el controlador IMSIC, faltará el dominio MSI principal, lo que provoca una desreferencia de puntero NULL en msi_create_device_irq_domain(). Evite esto aplazando la prueba hasta que el dominio MSI principal esté disponible. Utilice dev_err_probe() para evitar imprimir un mensaje de error al devolver -EPROBE_DEFER.
References () https://git.kernel.org/stable/c/1f181d1cda56c2fbe379c5ace1aa1fac6306669e - () https://git.kernel.org/stable/c/1f181d1cda56c2fbe379c5ace1aa1fac6306669e - Patch
References () https://git.kernel.org/stable/c/285a07810ab3bcedc2bd380ebacbf6b4942a889a - () https://git.kernel.org/stable/c/285a07810ab3bcedc2bd380ebacbf6b4942a889a - Patch
First Time Linux linux Kernel
Linux
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.5

28 Dec 2024, 10:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-12-28 10:15

Updated : 2025-01-14 15:44


NVD link : CVE-2024-56682

Mitre link : CVE-2024-56682

CVE.ORG link : CVE-2024-56682


JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference