Orta CVSS 5.5

CVE-2024-35984: Linux Kernel: NULL işaretçi başvurusu

Yayın: 20 Mayıs 2024 13:15 · Güncelleme: 6 Kasım 2026 09:47

Açıklama (NVD)

In the Linux kernel, the following vulnerability has been resolved: i2c: smbus: fix NULL function pointer dereference Baruch reported an OOPS when using the designware controller as target only. Target-only modes break the assumption of one transfer function always being available. Fix this by always checking the pointer in __i2c_transfer. [wsa: dropped the simplification in core-smbus to avoid theoretical regressions]

Özet bilgiler

Ürün: Linux Linux Kernel
CVSS v3.1: 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS: %0,26 (yüzdelik 17)
CWE: CWE-476
Yama: Mevcut

Etkilenen sürümler

Ürün	Başlangıç	Bitiş	Düzeltildi
linux-linux-kernel	3.19	—	4.19.313
linux-linux-kernel	4.20	—	5.4.275
linux-linux-kernel	5.5	—	5.10.216
linux-linux-kernel	5.11	—	5.15.158
linux-linux-kernel	5.16	—	6.1.90
linux-linux-kernel	6.2	—	6.6.30
linux-linux-kernel	6.7	—	6.8.9

Kaynaklar

Uygulamada aç Tüm CVE kayıtları