In the Linux kernel, the following vulnerability has been resolved:
PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
If IORESOURCE_MEM is not provided in Device Tree due to
any error, resource_list_first_type() will return NULL and
pci_parse_request_of_pci_ranges() will just emit a warning.
This will cause a NULL pointer dereference. Fix this bug by adding NULL
return check.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
References
Configurations
Configuration 1 (hide)
|
History
03 Sep 2024, 17:49
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-476 | |
| First Time |
Linux
Linux linux Kernel |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| CPE | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | |
| References | () https://git.kernel.org/stable/c/dbcdd1863ba2ec9b76ec131df25d797709e05597 - Patch | |
| References | () https://git.kernel.org/stable/c/a231707a91f323af1e5d9f1722055ec2fc1c7775 - Patch | |
| References | () https://git.kernel.org/stable/c/bbba48ad67c53feea05936ea1e029dcca8057506 - Patch | |
| References | () https://git.kernel.org/stable/c/0a6f1b5fe8ef8268aaa069035639968ceeea0a23 - Patch |
17 Aug 2024, 10:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-08-17 10:15
Updated : 2024-09-03 17:49
NVD link : CVE-2024-43823
Mitre link : CVE-2024-43823
JSON object : View
Products Affected
linux
- linux_kernel
CWE
CWE-476
NULL Pointer Dereference