CVE-2024-42277: iommu: sprd: Avoid NULL deref in sprd_iommu_hw_en
In the Linux kernel, the following vulnerability has been resolved:
iommu: sprd: Avoid NULL deref in sprdiommuhwen
In sprdiommucleanup() before calling function sprdiommuhwen() dom->sdev is equal to NULL, which leads to null dereference.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.106-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.10.3-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-42277?
CVE-2024-42277 is considered a medium severity vulnerability due to the potential for NULL dereference in the Linux kernel.
How do I fix CVE-2024-42277?
To fix CVE-2024-42277, update your Linux kernel to versions 5.10.223-1, 6.1.123-1, or later secure releases.
Which Linux kernel versions are affected by CVE-2024-42277?
CVE-2024-42277 affects Linux kernel versions from 5.15.113 to 5.15.165, various 6.x versions up to 6.10.3, and other specific versions.
What causes CVE-2024-42277 in the Linux kernel?
CVE-2024-42277 is caused by a NULL dereference in the sprd_iommu_cleanup() function when dom->sdev is NULL.
Is CVE-2024-42277 present in Debian Linux distributions?
Yes, CVE-2024-42277 is present in affected versions of the Linux kernel used in Debian distributions.