{"id":"CVE-2024-45028","state":"PUBLISHED","title":"mmc: mmc_test: Fix NULL dereference on allocation failure","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nmmc: mmc_test: Fix NULL dereference on allocation failure\n\nIf the \"test->highmem = alloc_pages()\" allocation fails then calling\n__free_pages(test->highmem) will result in a NULL dereference.  Also\nchange the error code to -ENOMEM instead of returning success.","publishedAt":"2024-09-11T15:13:59.649Z","updatedAt":"2026-05-11T20:34:05.437Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"2661081f5ab9cb25359d27f88707a018cf4e68e9","status":"affected","lessThan":"e97be13a9f51284da450dd2a592e3fa87b49cdc9","versionType":"git"},{"version":"2661081f5ab9cb25359d27f88707a018cf4e68e9","status":"affected","lessThan":"2b507b03991f44dfb202fc2a82c9874d1b1f0c06","versionType":"git"},{"version":"2661081f5ab9cb25359d27f88707a018cf4e68e9","status":"affected","lessThan":"9b9ba386d7bfdbc38445932c90fa9444c0524bea","versionType":"git"},{"version":"2661081f5ab9cb25359d27f88707a018cf4e68e9","status":"affected","lessThan":"e40515582141a9e7c84b269be699c05236a499a6","versionType":"git"},{"version":"2661081f5ab9cb25359d27f88707a018cf4e68e9","status":"affected","lessThan":"3b4e76ceae5b5a46c968bd952f551ce173809f63","versionType":"git"},{"version":"2661081f5ab9cb25359d27f88707a018cf4e68e9","status":"affected","lessThan":"cac2815f49d343b2f0acc4973d2c14918ac3ab0c","versionType":"git"},{"version":"2661081f5ab9cb25359d27f88707a018cf4e68e9","status":"affected","lessThan":"ecb15b8ca12c0cbdab81e307e9795214d8b90890","versionType":"git"},{"version":"2661081f5ab9cb25359d27f88707a018cf4e68e9","status":"affected","lessThan":"a1e627af32ed60713941cbfc8075d44cad07f6dd","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/mmc/core/mmc_test.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"2.6.27","status":"affected"},{"version":"0","status":"unaffected","lessThan":"2.6.27","versionType":"semver"},{"version":"4.19.321","status":"unaffected","lessThanOrEqual":"4.19.*","versionType":"semver"},{"version":"5.4.283","status":"unaffected","lessThanOrEqual":"5.4.*","versionType":"semver"},{"version":"5.10.225","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.166","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.107","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.48","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.10.7","status":"unaffected","lessThanOrEqual":"6.10.*","versionType":"semver"},{"version":"6.11","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/mmc/core/mmc_test.c"]}],"references":["https://git.kernel.org/stable/c/e97be13a9f51284da450dd2a592e3fa87b49cdc9","https://git.kernel.org/stable/c/2b507b03991f44dfb202fc2a82c9874d1b1f0c06","https://git.kernel.org/stable/c/9b9ba386d7bfdbc38445932c90fa9444c0524bea","https://git.kernel.org/stable/c/e40515582141a9e7c84b269be699c05236a499a6","https://git.kernel.org/stable/c/3b4e76ceae5b5a46c968bd952f551ce173809f63","https://git.kernel.org/stable/c/cac2815f49d343b2f0acc4973d2c14918ac3ab0c","https://git.kernel.org/stable/c/ecb15b8ca12c0cbdab81e307e9795214d8b90890","https://git.kernel.org/stable/c/a1e627af32ed60713941cbfc8075d44cad07f6dd","https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html","https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html"],"weaknesses":[],"ingestedAt":"2026-10-29T20:07:47.831Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/45xxx/CVE-2024-45028.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2024-45028","state":"PUBLISHED","datePublished":"2024-09-11T15:13:59.649Z","dateUpdated":"2026-05-11T20:34:05.437Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2024-08-21T05:34:56.685Z"},"containers":{"cna":{"title":"mmc: mmc_test: Fix NULL dereference on allocation failure","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nmmc: mmc_test: Fix NULL dereference on allocation failure\n\nIf the \"test->highmem = alloc_pages()\" allocation fails then calling\n__free_pages(test->highmem) will result in a NULL dereference.  Also\nchange the error code to -ENOMEM instead of returning success."}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"2661081f5ab9cb25359d27f88707a018cf4e68e9","status":"affected","lessThan":"e97be13a9f51284da450dd2a592e3fa87b49cdc9","versionType":"git"},{"version":"2661081f5ab9cb25359d27f88707a018cf4e68e9","status":"affected","lessThan":"2b507b03991f44dfb202fc2a82c9874d1b1f0c06","versionType":"git"},{"version":"2661081f5ab9cb25359d27f88707a018cf4e68e9","status":"affected","lessThan":"9b9ba386d7bfdbc38445932c90fa9444c0524bea","versionType":"git"},{"version":"2661081f5ab9cb25359d27f88707a018cf4e68e9","status":"affected","lessThan":"e40515582141a9e7c84b269be699c05236a499a6","versionType":"git"},{"version":"2661081f5ab9cb25359d27f88707a018cf4e68e9","status":"affected","lessThan":"3b4e76ceae5b5a46c968bd952f551ce173809f63","versionType":"git"},{"version":"2661081f5ab9cb25359d27f88707a018cf4e68e9","status":"affected","lessThan":"cac2815f49d343b2f0acc4973d2c14918ac3ab0c","versionType":"git"},{"version":"2661081f5ab9cb25359d27f88707a018cf4e68e9","status":"affected","lessThan":"ecb15b8ca12c0cbdab81e307e9795214d8b90890","versionType":"git"},{"version":"2661081f5ab9cb25359d27f88707a018cf4e68e9","status":"affected","lessThan":"a1e627af32ed60713941cbfc8075d44cad07f6dd","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/mmc/core/mmc_test.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"2.6.27","status":"affected"},{"version":"0","status":"unaffected","lessThan":"2.6.27","versionType":"semver"},{"version":"4.19.321","status":"unaffected","lessThanOrEqual":"4.19.*","versionType":"semver"},{"version":"5.4.283","status":"unaffected","lessThanOrEqual":"5.4.*","versionType":"semver"},{"version":"5.10.225","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.166","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.107","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.48","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.10.7","status":"unaffected","lessThanOrEqual":"6.10.*","versionType":"semver"},{"version":"6.11","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/mmc/core/mmc_test.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/e97be13a9f51284da450dd2a592e3fa87b49cdc9"},{"url":"https://git.kernel.org/stable/c/2b507b03991f44dfb202fc2a82c9874d1b1f0c06"},{"url":"https://git.kernel.org/stable/c/9b9ba386d7bfdbc38445932c90fa9444c0524bea"},{"url":"https://git.kernel.org/stable/c/e40515582141a9e7c84b269be699c05236a499a6"},{"url":"https://git.kernel.org/stable/c/3b4e76ceae5b5a46c968bd952f551ce173809f63"},{"url":"https://git.kernel.org/stable/c/cac2815f49d343b2f0acc4973d2c14918ac3ab0c"},{"url":"https://git.kernel.org/stable/c/ecb15b8ca12c0cbdab81e307e9795214d8b90890"},{"url":"https://git.kernel.org/stable/c/a1e627af32ed60713941cbfc8075d44cad07f6dd"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-05-11T20:34:05.437Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.27","versionEndExcluding":"4.19.321"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.27","versionEndExcluding":"5.4.283"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.27","versionEndExcluding":"5.10.225"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.27","versionEndExcluding":"5.15.166"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.27","versionEndExcluding":"6.1.107"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.27","versionEndExcluding":"6.6.48"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.27","versionEndExcluding":"6.10.7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.27","versionEndExcluding":"6.11"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-09-29T15:46:08.195829Z","id":"CVE-2024-45028","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-09-29T15:46:22.699Z"}},{"title":"CVE Program Container","references":[{"url":"https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"},{"url":"https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html"}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2025-11-03T22:15:41.135Z"}}]}}}