CVE-2024-35940: pstore/zone: Add a null pointer check to the psz_kmsg_read
In the Linux kernel, the following vulnerability has been resolved:
pstore/zone: Add a null pointer check to the pszkmsgread
kasprintf() returns a pointer to dynamically allocated memory which can be NULL upon failure. Ensure the allocation was successful by checking the pointer validity.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-35940?
CVE-2024-35940 is classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2024-35940?
To fix CVE-2024-35940, upgrade to the patched Linux kernel versions 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, 6.12.10-1, or 6.12.11-1.
What component is affected by CVE-2024-35940?
CVE-2024-35940 affects the pstore/zone component of the Linux kernel.
What type of vulnerability is CVE-2024-35940?
CVE-2024-35940 is a null pointer dereference vulnerability due to inadequate memory allocation checks.
Who is impacted by CVE-2024-35940?
Users running affected versions of the Linux kernel, particularly in Debian distributions, are impacted by CVE-2024-35940.