CVE-2024-39466: thermal/drivers/qcom/lmh: Check for SCM availability at probe
In the Linux kernel, the following vulnerability has been resolved:
thermal/drivers/qcom/lmh: Check for SCM availability at probe
Up until now, the necessary scm availability check has not been performed, leading to possible null pointer dereferences (which did happen for me on RB1).
Fix that.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-39466?
CVE-2024-39466 has a moderate severity level due to the potential for null pointer dereferences.
How do I fix CVE-2024-39466?
To address CVE-2024-39466, upgrade to one of the following Linux kernel versions: 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, 6.12.11-1, or 6.12.12-1.
Which Linux kernel versions are vulnerable to CVE-2024-39466?
The vulnerable Linux kernel versions for CVE-2024-39466 are from 5.15.0 up to 5.15.161, 5.16.0 up to 6.1.94, 6.2.0 up to 6.6.34, and 6.7.0 to 6.9.5.
What components are affected by CVE-2024-39466?
CVE-2024-39466 affects the thermal drivers in the Linux kernel, particularly the qcom lmh module.
Is CVE-2024-39466 exploitable in production environments?
Yes, CVE-2024-39466 is considered exploitable in production environments, especially if the vulnerable kernel versions are in use.