{"id":"CVE-2024-53043","state":"PUBLISHED","title":"mctp i2c: handle NULL header address","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nmctp i2c: handle NULL header address\n\ndaddr can be NULL if there is no neighbour table entry present,\nin that case the tx packet should be dropped.\n\nsaddr will usually be set by MCTP core, but check for NULL in case a\npacket is transmitted by a different protocol.","publishedAt":"2024-11-19T17:19:31.497Z","updatedAt":"2026-05-11T20:49:42.996Z","severity":{"score":5.5,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","source":"CISA-ADP"},"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"f5b8abf9fc3dacd7529d363e26fe8230935d65f8","status":"affected","lessThan":"4707893315802a0917231b94cb20cbe50ccbfe03","versionType":"git"},{"version":"f5b8abf9fc3dacd7529d363e26fe8230935d65f8","status":"affected","lessThan":"8e886e44397ba89f6e8da8471386112b4f5b67b7","versionType":"git"},{"version":"f5b8abf9fc3dacd7529d363e26fe8230935d65f8","status":"affected","lessThan":"8c222adadc1612e4f097688875962a28e3f5ab44","versionType":"git"},{"version":"f5b8abf9fc3dacd7529d363e26fe8230935d65f8","status":"affected","lessThan":"01e215975fd80af81b5b79f009d49ddd35976c13","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/net/mctp/mctp-i2c.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"5.18","status":"affected"},{"version":"0","status":"unaffected","lessThan":"5.18","versionType":"semver"},{"version":"6.1.116","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.60","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.11.7","status":"unaffected","lessThanOrEqual":"6.11.*","versionType":"semver"},{"version":"6.12","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/net/mctp/mctp-i2c.c"]}],"references":["https://git.kernel.org/stable/c/4707893315802a0917231b94cb20cbe50ccbfe03","https://git.kernel.org/stable/c/8e886e44397ba89f6e8da8471386112b4f5b67b7","https://git.kernel.org/stable/c/8c222adadc1612e4f097688875962a28e3f5ab44","https://git.kernel.org/stable/c/01e215975fd80af81b5b79f009d49ddd35976c13","https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"],"weaknesses":["CWE-476"],"ingestedAt":"2026-10-29T20:08:04.920Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/53xxx/CVE-2024-53043.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2024-53043","state":"PUBLISHED","datePublished":"2024-11-19T17:19:31.497Z","dateUpdated":"2026-05-11T20:49:42.996Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2024-11-19T17:17:24.972Z"},"containers":{"cna":{"title":"mctp i2c: handle NULL header address","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nmctp i2c: handle NULL header address\n\ndaddr can be NULL if there is no neighbour table entry present,\nin that case the tx packet should be dropped.\n\nsaddr will usually be set by MCTP core, but check for NULL in case a\npacket is transmitted by a different protocol."}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"f5b8abf9fc3dacd7529d363e26fe8230935d65f8","status":"affected","lessThan":"4707893315802a0917231b94cb20cbe50ccbfe03","versionType":"git"},{"version":"f5b8abf9fc3dacd7529d363e26fe8230935d65f8","status":"affected","lessThan":"8e886e44397ba89f6e8da8471386112b4f5b67b7","versionType":"git"},{"version":"f5b8abf9fc3dacd7529d363e26fe8230935d65f8","status":"affected","lessThan":"8c222adadc1612e4f097688875962a28e3f5ab44","versionType":"git"},{"version":"f5b8abf9fc3dacd7529d363e26fe8230935d65f8","status":"affected","lessThan":"01e215975fd80af81b5b79f009d49ddd35976c13","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/net/mctp/mctp-i2c.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"5.18","status":"affected"},{"version":"0","status":"unaffected","lessThan":"5.18","versionType":"semver"},{"version":"6.1.116","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.60","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.11.7","status":"unaffected","lessThanOrEqual":"6.11.*","versionType":"semver"},{"version":"6.12","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/net/mctp/mctp-i2c.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/4707893315802a0917231b94cb20cbe50ccbfe03"},{"url":"https://git.kernel.org/stable/c/8e886e44397ba89f6e8da8471386112b4f5b67b7"},{"url":"https://git.kernel.org/stable/c/8c222adadc1612e4f097688875962a28e3f5ab44"},{"url":"https://git.kernel.org/stable/c/01e215975fd80af81b5b79f009d49ddd35976c13"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-05-11T20:49:42.996Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.18","versionEndExcluding":"6.1.116"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.18","versionEndExcluding":"6.6.60"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.18","versionEndExcluding":"6.11.7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.18","versionEndExcluding":"6.12"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2024-53043","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2025-10-01T20:13:41.090520Z"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-476","lang":"en","type":"CWE","description":"CWE-476 NULL Pointer Dereference"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-10-01T20:17:19.444Z"}},{"title":"CVE Program Container","references":[{"url":"https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2025-11-03T22:28:46.103Z"}}]}}}