Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2024-24856

NULL pointer deference in acpi_db_convert_to_package of Linux acpi module

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Anolis

Description

The memory allocation function ACPI_ALLOCATE_ZEROED does not guarantee a successful allocation, but the subsequent code directly dereferences the pointer that receives it, which may lead to null pointer dereference. To fix this issue, a null pointer check should be added. If it is null, return exception code AE_NO_MEMORY.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OpenAnolis Anolis OS

Default version status: unaffected

  • v4.4 to < v6.9affected

References