CVE-2024-40933: iio: temperature: mlx90635: Fix ERR_PTR dereference in mlx90635_probe()
In the Linux kernel, the following vulnerability has been resolved:
iio: temperature: mlx90635: Fix ERRPTR dereference in mlx90635probe()
When devmregmapiniti2c() fails, regmapee could be error pointer, instead of checking for ISERR(regmapee), regmap is checked which looks like a copy paste error.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-40933?
CVE-2024-40933 has a medium severity rating due to the potential for system instability.
How do I fix CVE-2024-40933?
To fix CVE-2024-40933, update your Linux kernel to one of the patched versions, such as 5.10.223-1 or 6.12.12-1.
What versions of the Linux kernel are affected by CVE-2024-40933?
CVE-2024-40933 affects Linux kernel versions from 6.8 to 6.10-rc3.
What is the nature of the vulnerability in CVE-2024-40933?
CVE-2024-40933 involves an ERR_PTR dereference issue in the mlx90635 temperature sensor driver.
Does CVE-2024-40933 affect all Linux distributions?
CVE-2024-40933 specifically impacts the Linux kernel and therefore may affect any distribution using the vulnerable versions.