CVE-2024-42248: tty: serial: ma35d1: Add a NULL check for of_node
In the Linux kernel, the following vulnerability has been resolved:
tty: serial: ma35d1: Add a NULL check for ofnode
The pdev->dev.ofnode can be NULL if the "serial" node is absent. Add a NULL check to return an error in such cases.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-42248?
CVE-2024-42248 has a medium severity level as it involves a potential NULL pointer dereference in the Linux kernel.
How do I fix CVE-2024-42248?
To fix CVE-2024-42248, update to the patched versions of the Linux kernel mentioned in the advisory.
What systems are affected by CVE-2024-42248?
CVE-2024-42248 affects Linux kernel versions between 6.5 and 6.6.41, as well as versions between 6.7 and 6.9.10.
Is CVE-2024-42248 exploit possible?
Exploitation of CVE-2024-42248 is possible if an attacker can manipulate the serial device node, leading to a denial of service.
What are the symptoms of CVE-2024-42248?
Symptoms of CVE-2024-42248 include unexpected kernel crashes and potentially unresponsive serial device handling.