CVE-2024-35916: dma-buf: Fix NULL pointer dereference in sanitycheck()
In the Linux kernel, the following vulnerability has been resolved:
dma-buf: Fix NULL pointer dereference in sanitycheck()
If due to a memory allocation failure mockchain() returns NULL, it is passed to dmafenceenableswsignaling() resulting in NULL pointer dereference there.
Call dmafenceenableswsignaling() only if mockchain() succeeds.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-35916?
CVE-2024-35916 is classified as a medium severity vulnerability due to the potential for a NULL pointer dereference.
How do I fix CVE-2024-35916?
To mitigate CVE-2024-35916, ensure you upgrade your Linux kernel to one of the patched versions such as 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, 6.12.10-1, or 6.12.11-1.
What versions of Linux are affected by CVE-2024-35916?
CVE-2024-35916 affects specific versions of the Linux kernel prior to the fixes, specifically versions before 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, 6.12.10-1, and 6.12.11-1.
Is CVE-2024-35916 a remote exploitation vulnerability?
CVE-2024-35916 does not appear to be a remote exploitation vulnerability as it is related to a local NULL pointer dereference issue.
What component of the Linux kernel is affected by CVE-2024-35916?
CVE-2024-35916 specifically affects the dma-buf component of the Linux kernel.