CVE-2024-43823

MEDIUM EPSS 13.1%
Published Aug 17, 20241y ago · Modified Jun 17, 20262w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Aug 17, 2024 1y ago
Last Modified Jun 17, 2026 2w ago

Description

In the Linux kernel, the following vulnerability has been resolved: PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs() If IORESOURCE_MEM is not provided in Device Tree due to any error, resource_list_first_type() will return NULL and pci_parse_request_of_pci_ranges() will just emit a warning. This will cause a NULL pointer dereference. Fix this bug by adding NULL return check. Found by Linux Verification Center (linuxtesting.org) with SVACE.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
13.1% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-476 NULL Pointer Dereference Memory Safety

Affected Products 3

VendorProductVersionRange
linuxlinux_kernel*≥5.10  –  <6.1.103
linuxlinux_kernel*≥6.2  –  <6.6.44
linuxlinux_kernel*≥6.7  –  <6.10.3

References 5

  • git.kernel.org https://git.kernel.org/stable/c/0a6f1b5fe8ef8268aaa069035639968ceeea0a23
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/a231707a91f323af1e5d9f1722055ec2fc1c7775
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/bbba48ad67c53feea05936ea1e029dcca8057506
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/dbcdd1863ba2ec9b76ec131df25d797709e05597
    Patch
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/0a6f1b5fe8ef8268aaa069035639968ceeea0a23
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/a231707a91f323af1e5d9f1722055ec2fc1c7775
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/bbba48ad67c53feea05936ea1e029dcca8057506
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/dbcdd1863ba2ec9b76ec131df25d797709e05597
    Patch