CVE-2024-26771: dmaengine: ti: edma: Add some null pointer checks to the edma_probe
In the Linux kernel, the following vulnerability has been resolved:
dmaengine: ti: edma: Add some null pointer checks to the edmaprobe
devmkasprintf() returns a pointer to dynamically allocated memory which can be NULL upon failure. Ensure the allocation was successful by checking the pointer validity.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Compensating control
In the Linux kernel dmaengine TI EDMA edma_probe path, check the pointer returned by devm_kasprintf() for NULL and handle allocation failure before using it.
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26771?
CVE-2024-26771 is classified as a medium-severity vulnerability in the Linux kernel.
How do I fix CVE-2024-26771?
To fix CVE-2024-26771, upgrade to a patched version of the Linux kernel, such as 5.10.223-1 or higher.
What systems are affected by CVE-2024-26771?
CVE-2024-26771 affects multiple versions of the Linux kernel, specifically those before 5.10.223 and various version ranges from 5.11 to 6.8-rc2.
What does CVE-2024-26771 exploit?
CVE-2024-26771 exploits a null pointer dereference in the DMA engine of the Linux kernel.
Is there a workaround for CVE-2024-26771?
There is no known workaround for CVE-2024-26771; applying the available patches is recommended.