CVE-2024-42310

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-42310
In the Linux kernel, the following vulnerability has been resolved: drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes In cdv_intel_lvds_get_modes(), the return value of drm_mode_duplicate() is assigned to mode, which will lead to a NULL pointer dereference on failure of drm_mode_duplicate(). Add a check to avoid npd.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/08f45102c81ad8bc9f85f7a25e9f64e128edb87d Patch
https://git.kernel.org/stable/c/2d209b2f862f6b8bff549ede541590a8d119da23 Patch
https://git.kernel.org/stable/c/977ee4fe895e1729cd36cc26916bbb10084713d6 Patch
https://git.kernel.org/stable/c/a658ae2173ab74667c009e2550455e6de5b33ddc Patch
https://git.kernel.org/stable/c/b6ac46a00188cde50ffba233e6efb366354a1de5 Patch
https://git.kernel.org/stable/c/cb520c3f366c77e8d69e4e2e2781a8ce48d98e79 Patch
https://git.kernel.org/stable/c/e74eb5e8089427c8c49e0dd5067e5f39ce3a4d56 Patch
https://git.kernel.org/stable/c/f392c36cebf4c1d6997a4cc2c0f205254acef42a Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

22 Aug 2024, 16:01

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux linux Kernel
Linux
CWE CWE-476
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/08f45102c81ad8bc9f85f7a25e9f64e128edb87d - () https://git.kernel.org/stable/c/08f45102c81ad8bc9f85f7a25e9f64e128edb87d - Patch
References () https://git.kernel.org/stable/c/2d209b2f862f6b8bff549ede541590a8d119da23 - () https://git.kernel.org/stable/c/2d209b2f862f6b8bff549ede541590a8d119da23 - Patch
References () https://git.kernel.org/stable/c/977ee4fe895e1729cd36cc26916bbb10084713d6 - () https://git.kernel.org/stable/c/977ee4fe895e1729cd36cc26916bbb10084713d6 - Patch
References () https://git.kernel.org/stable/c/a658ae2173ab74667c009e2550455e6de5b33ddc - () https://git.kernel.org/stable/c/a658ae2173ab74667c009e2550455e6de5b33ddc - Patch
References () https://git.kernel.org/stable/c/b6ac46a00188cde50ffba233e6efb366354a1de5 - () https://git.kernel.org/stable/c/b6ac46a00188cde50ffba233e6efb366354a1de5 - Patch
References () https://git.kernel.org/stable/c/cb520c3f366c77e8d69e4e2e2781a8ce48d98e79 - () https://git.kernel.org/stable/c/cb520c3f366c77e8d69e4e2e2781a8ce48d98e79 - Patch
References () https://git.kernel.org/stable/c/e74eb5e8089427c8c49e0dd5067e5f39ce3a4d56 - () https://git.kernel.org/stable/c/e74eb5e8089427c8c49e0dd5067e5f39ce3a4d56 - Patch
References () https://git.kernel.org/stable/c/f392c36cebf4c1d6997a4cc2c0f205254acef42a - () https://git.kernel.org/stable/c/f392c36cebf4c1d6997a4cc2c0f205254acef42a - Patch

19 Aug 2024, 12:59

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: drm/gma500: corrige la desreferencia del puntero nulo en cdv_intel_lvds_get_modes En cdv_intel_lvds_get_modes(), el valor de retorno de drm_mode_duplicate() se asigna al modo, lo que conducirá a una desreferencia del puntero NULL en caso de falla de drm_mode_duplicate(). Agregue una marca para evitar npd.

19 Aug 2024, 05:15

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/08f45102c81ad8bc9f85f7a25e9f64e128edb87d -
  • () https://git.kernel.org/stable/c/a658ae2173ab74667c009e2550455e6de5b33ddc -
  • () https://git.kernel.org/stable/c/b6ac46a00188cde50ffba233e6efb366354a1de5 -
  • () https://git.kernel.org/stable/c/f392c36cebf4c1d6997a4cc2c0f205254acef42a -

17 Aug 2024, 09:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-08-17 09:15

Updated : 2024-08-22 16:01

NVD link : CVE-2024-42310

Mitre link : CVE-2024-42310

CVE.ORG link : CVE-2024-42310

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference