CVE-2024-57978

MEDIUM EPSS 10.2%
Published Feb 27, 20251y ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Feb 27, 2025 1y ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: media: imx-jpeg: Fix potential error pointer dereference in detach_pm() The proble is on the first line: if (jpeg->pd_dev[i] && !pm_runtime_suspended(jpeg->pd_dev[i])) If jpeg->pd_dev[i] is an error pointer, then passing it to pm_runtime_suspended() will lead to an Oops. The other conditions check for both error pointers and NULL, but it would be more clear to use the IS_ERR_OR_NULL() check for that.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
10.2% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-476 NULL Pointer Dereference Memory Safety

Affected Products 5

VendorProductVersionRange
linuxlinux_kernel*≥5.15.174  –  <5.16
linuxlinux_kernel*≥6.1.120  –  <6.1.129
linuxlinux_kernel*≥6.6.64  –  <6.6.76
linuxlinux_kernel*≥6.12.4  –  <6.12.13
linuxlinux_kernel*≥6.13  –  <6.13.2

References 7

  • git.kernel.org https://git.kernel.org/stable/c/1378ffec30367233152b7dbf4fa6a25ee98585d1
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/1b2af918bb714937a8be6cb637f528585461cd98
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/6e601a64f7777e2f78c02db1a8b5ba3b7c5e9e31
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/a32ba399a030853f2db45a90ba5474fdd3494aad
  • git.kernel.org https://git.kernel.org/stable/c/f0b8535a7885ed4fd0b11625addb5476cae0f845
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/fde89fe11b44500bfcb2d405825b69a5df805d19
    Patch
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/1378ffec30367233152b7dbf4fa6a25ee98585d1
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/1b2af918bb714937a8be6cb637f528585461cd98
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/6e601a64f7777e2f78c02db1a8b5ba3b7c5e9e31
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/f0b8535a7885ed4fd0b11625addb5476cae0f845
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/fde89fe11b44500bfcb2d405825b69a5df805d19
    Patch