CVE-2024-40982: ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
First published: Fri Jul 12 2024(Updated: )
In the Linux kernel, the following vulnerability has been resolved: ssb: Fix potential NULL pointer dereference in ssb_device_uevent() The ssb_device_uevent() function first attempts to convert the 'dev' pointer to 'struct ssb_device *'. However, it mistakenly dereferences 'dev' before performing the NULL check, potentially leading to a NULL pointer dereference if 'dev' is NULL. To fix this issue, move the NULL check before dereferencing the 'dev' pointer, ensuring that the pointer is valid before attempting to use it. Found by Linux Verification Center (linuxtesting.org) with SVACE.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 416baaa9-dc9f-4396-8d5f-8c081fb06d67
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux Linux kernel | <6.6.36 | |
| Linux Linux kernel | >=6.7<6.9.7 | |
| debian/linux | <=5.10.223-1<=5.10.226-1<=6.1.115-1<=6.1.119-1 | 6.11.10-1 6.12.5-1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://git.kernel.org/stable/c/789c17185fb0f39560496c2beab9b57ce1d0cbe7
- https://git.kernel.org/stable/c/7d43c8377c6fc846b1812f8df360425c9323dc56
- https://git.kernel.org/stable/c/c5dc2d8eb3981bae261ea7d1060a80868e886813
- https://git.kernel.org/linus/789c17185fb0f39560496c2beab9b57ce1d0cbe7
- https://security-tracker.debian.org/tracker/CVE-2024-40982
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40982
- https://nvd.nist.gov/vuln/detail/CVE-2024-40982
- https://launchpad.net/bugs/cve/CVE-2024-40982
- https://ubuntu.com/security/CVE-2024-40982
- agent/title
- agent/type
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/severity
- agent/author
- agent/remedy
- agent/first-publish-date
- agent/weakness
- agent/references
- agent/tags
- collector/usn-cve
- source/Ubuntu
- agent/description
- collector/nvd-cve
- agent/event
- collector/security-tracker-debian
- source/Debian
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/trending
- vendor/linux
- canonical/linux linux kernel
- version/linux linux kernel/6.7
- package-manager/debian