CVE-2024-45002: rtla/osnoise: Prevent NULL dereference in error handling
In the Linux kernel, the following vulnerability has been resolved:
rtla/osnoise: Prevent NULL dereference in error handling
If the "tool->data" allocation fails then there is no need to call osnoisefreetop() and, in fact, doing so will lead to a NULL dereference.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-45002?
CVE-2024-45002 has a medium severity level due to the potential for a NULL dereference during error handling in the Linux kernel.
How do I fix CVE-2024-45002?
To fix CVE-2024-45002, upgrade to the patched versions provided by your distribution, such as linux 5.10.223-1, 6.1.123-1, or any later versions.
Which versions of Linux kernel are affected by CVE-2024-45002?
CVE-2024-45002 affects Linux kernel versions from 5.17 to 6.10.7 and specific release candidates like 6.11-rc1, 6.11-rc2, and 6.11-rc3.
What component of Linux does CVE-2024-45002 impact?
CVE-2024-45002 impacts the rtla/osnoise component of the Linux kernel, specifically during allocation error handling.
Is CVE-2024-45002 present in all distributions of Linux?
CVE-2024-45002 is present in specific versions of the Linux kernel that may be used in various distributions, so checking your kernel version is essential.