Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2024-56782

ACPI: x86: Add adev NULL check to acpi_quirk_skip_serdev_enumeration()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ACPI: x86: Add adev NULL check to acpi_quirk_skip_serdev_enumeration() acpi_dev_hid_match() does not check for adev == NULL, dereferencing it unconditional. Add a check for adev being NULL before calling acpi_dev_hid_match(). At the moment acpi_quirk_skip_serdev_enumeration() is never called with a controller_parent without an ACPI companion, but better safe than sorry.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 99b572e6136eab69a8c91d72cf8595b256e304b5 to < e173bce05f7032a8b4964cfef82a4b7668f5f3afaffected
  • 99b572e6136eab69a8c91d72cf8595b256e304b5 to < 4a49194f587a62d972b602e3e1a2c3cfe6567966affected
  • 4af6a20d48342db472f9a865c037dfeea9104d0daffected
  • 6.8.6 to < 6.9affected

Linux Linux

Default version status: affected

  • 6.9affected
  • 0 to < 6.9unaffected
  • 6.12.5 to ≤ 6.12.*unaffected
  • 6.13 to ≤ *unaffected

References