CVE-2024-57985
MEDIUM EPSS 8.4%
Published Feb 27, 20251y ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Published Feb 27, 2025 1y ago
Last Modified Jun 17, 2026 1w ago
Description
In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: scm: Cleanup global '__scm' on probe failures If SCM driver fails the probe, it should not leave global '__scm' variable assigned, because external users of this driver will assume the probe finished successfully. For example TZMEM parts ('__scm->mempool') are initialized later in the probe, but users of it (__scm_smc_call()) rely on the '__scm' variable. This fixes theoretical NULL pointer exception, triggered via introducing probe deferral in SCM driver with call trace: qcom_tzmem_alloc+0x70/0x1ac (P) qcom_tzmem_alloc+0x64/0x1ac (L) qcom_scm_assign_mem+0x78/0x194 qcom_rmtfs_mem_probe+0x2d4/0x38c platform_probe+0x68/0xc8
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High
Threat Intelligence
EPSS Exploit Probability
8.4% percentile
Exploit & Patch Status
No Known Exploit
Patch Available
Affected Products 2
References 3
- git.kernel.org https://git.kernel.org/stable/c/1e76b546e6fca7eb568161f408133904ca6bcf4f
- git.kernel.org https://git.kernel.org/stable/c/390d3baeba51a126f75c97b90ec28b9384ce4b84
- git.kernel.org https://git.kernel.org/stable/c/faf1715798fe72b79e4432ce8c6d03ca69765425
Remediation
- git.kernel.org https://git.kernel.org/stable/c/1e76b546e6fca7eb568161f408133904ca6bcf4f
- git.kernel.org https://git.kernel.org/stable/c/390d3baeba51a126f75c97b90ec28b9384ce4b84
- git.kernel.org https://git.kernel.org/stable/c/faf1715798fe72b79e4432ce8c6d03ca69765425