CVE-2024-42277: iommu: sprd: Avoid NULL deref in sprd_iommu_hw_en
In the Linux kernel, the following vulnerability has been resolved:
iommu: sprd: Avoid NULL deref in sprdiommuhwen
In sprdiommucleanup() before calling function sprdiommuhwen() dom->sdev is equal to NULL, which leads to null dereference.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-42277?
CVE-2024-42277 is considered a medium severity vulnerability due to the potential for NULL dereference in the Linux kernel.
How do I fix CVE-2024-42277?
To fix CVE-2024-42277, update your Linux kernel to versions 5.10.223-1, 6.1.123-1, or later secure releases.
Which Linux kernel versions are affected by CVE-2024-42277?
CVE-2024-42277 affects Linux kernel versions from 5.15.113 to 5.15.165, various 6.x versions up to 6.10.3, and other specific versions.
What causes CVE-2024-42277 in the Linux kernel?
CVE-2024-42277 is caused by a NULL dereference in the sprd_iommu_cleanup() function when dom->sdev is NULL.
Is CVE-2024-42277 present in Debian Linux distributions?
Yes, CVE-2024-42277 is present in affected versions of the Linux kernel used in Debian distributions.