CVE-2024-45028: mmc: mmc_test: Fix NULL dereference on allocation failure

Published Sep 11, 2024

Updated

In the Linux kernel, the following vulnerability has been resolved:

mmc: mmctest: Fix NULL dereference on allocation failure

If the "test->highmem = allocpages()" allocation fails then calling freepages(test->highmem) will result in a NULL dereference. Also change the error code to -ENOMEM instead of returning success.

Affected Software

174 affected componentsFixes available

Linux Linux kernel>=2.6.27<4.19.321

Linux Linux kernel>=4.20<5.4.283

Linux Linux kernel>=5.5<5.10.225

Linux Linux kernel>=5.11<5.15.166

Linux Linux kernel>=5.16<6.1.107

Linux Linux kernel>=6.2<6.6.48

Linux Linux kernel>=6.7<6.10.7

Linux Linux kernel=6.11-rc1

Linux Linux kernel=6.11-rc2

Linux Linux kernel=6.11-rc3

Linux Linux kernel=6.11-rc4

Microsoft cbl2 kernel 5.15.164.1-1

Patch available

Microsoft azl3 kernel 6.6.51.1-1

Patch available

Microsoft cbl2 kernel 5.15.164.1-1

Patch available

Microsoft azl3 kernel 6.6.47.1-1

Patch available

Microsoft cbl2 kernel 5.15.167.1-1

Patch available

debian/linux

6.1.176-16.1.190-16.12.107-16.12.113-17.2.12-17.2.13-1

ubuntu/linux-hwe-edge*

ubuntu/linux-aws-5.0*

ubuntu/linux-aws-5.3*

ubuntu/linux-aws-5.4<5.4.0-1135.145~18.04.1

5.4.0-1135.145~18.04.1

ubuntu/linux-azure*

ubuntu/linux-azure-5.3*

ubuntu/linux-azure-5.4<5.4.0-1140.147~18.04.1

5.4.0-1140.147~18.04.1

ubuntu/linux-azure-edge*

ubuntu/linux-gcp*

ubuntu/linux-gcp-5.3*

ubuntu/linux-gcp-5.4<5.4.0-1139.148~18.04.1

5.4.0-1139.148~18.04.1

ubuntu/linux-gke-4.15*

ubuntu/linux-gke-5.4*

ubuntu/linux-gkeop-5.4*

ubuntu/linux-hwe*

ubuntu/linux-hwe-5.4<5.4.0-200.220~18.04.1

5.4.0-200.220~18.04.1

ubuntu/linux-ibm-5.4<5.4.0-1082.87~18.04.1

5.4.0-1082.87~18.04.1

ubuntu/linux-oem*

ubuntu/linux-oracle-5.0*

ubuntu/linux-oracle-5.3*

ubuntu/linux-oracle-5.4<5.4.0-1134.143~18.04.1

5.4.0-1134.143~18.04.1

ubuntu/linux-raspi-5.4<5.4.0-1119.131~18.04.1

5.4.0-1119.131~18.04.1

ubuntu/linux<5.4.0-200.220

5.4.0-200.220

ubuntu/linux-aws<5.4.0-1135.145

5.4.0-1135.145

ubuntu/linux-aws-5.15<5.15.0-1072.78~20.04.1

5.15.0-1072.78~20.04.1

ubuntu/linux-azure<5.4.0-1140.147

5.4.0-1140.147

ubuntu/linux-azure-5.15<5.15.0-1078.87~20.04.1

5.15.0-1078.87~20.04.1

ubuntu/linux-bluefield<5.4.0-1095.102

5.4.0-1095.102

ubuntu/linux-gcp<5.4.0-1139.148

5.4.0-1139.148

ubuntu/linux-gcp-5.15<5.15.0-1071.79~20.04.1

5.15.0-1071.79~20.04.1

ubuntu/linux-gkeop<5.4.0-1102.106

5.4.0-1102.106

ubuntu/linux-gkeop-5.15<5.15.0-1055.62~20.04.1

5.15.0-1055.62~20.04.1

ubuntu/linux-hwe-5.15<5.15.0-125.135~20.04.1

5.15.0-125.135~20.04.1

ubuntu/linux-ibm<5.4.0-1082.87

5.4.0-1082.87

ubuntu/linux-ibm-5.15<5.15.0-1065.68~20.04.1

5.15.0-1065.68~20.04.1

ubuntu/linux-intel-iotg-5.15<5.15.0-1067.73~20.04.1

5.15.0-1067.73~20.04.1

ubuntu/linux-iot<5.4.0-1044.45

5.4.0-1044.45

ubuntu/linux-kvm<5.4.0-1123.131

5.4.0-1123.131

ubuntu/linux-lowlatency-hwe-5.15<5.15.0-125.135~20.04.1

5.15.0-125.135~20.04.1

ubuntu/linux-nvidia-tegra-5.15<5.15.0-1032.32~20.04.1

5.15.0-1032.32~20.04.1

ubuntu/linux-oracle<5.4.0-1134.143

5.4.0-1134.143

ubuntu/linux-oracle-5.15<5.15.0-1070.76~20.04.1

5.15.0-1070.76~20.04.1

ubuntu/linux-raspi<5.4.0-1119.131

5.4.0-1119.131

ubuntu/linux-riscv-5.15<5.15.0-1068.72~20.04.1

5.15.0-1068.72~20.04.1

ubuntu/linux-xilinx-zynqmp<5.4.0-1054.58

5.4.0-1054.58

ubuntu/linux-aws-5.11*

ubuntu/linux-aws-5.13*

ubuntu/linux-aws-5.8*

ubuntu/linux-azure-5.11*

ubuntu/linux-azure-5.13*

ubuntu/linux-azure-5.8*

ubuntu/linux-azure-fde*

ubuntu/linux-gcp-5.11*

ubuntu/linux-gcp-5.13*

ubuntu/linux-gcp-5.8*

ubuntu/linux-gke*

ubuntu/linux-gke-5.15*

ubuntu/linux-hwe-5.11*

ubuntu/linux-hwe-5.13*

ubuntu/linux-hwe-5.8*

ubuntu/linux-intel-5.13*

ubuntu/linux-oem-5.10*

ubuntu/linux-oem-5.13*

ubuntu/linux-oem-5.6*

ubuntu/linux-oracle-5.11*

ubuntu/linux-oracle-5.13*

ubuntu/linux-oracle-5.8*

ubuntu/linux-raspi2*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.11*

ubuntu/linux-riscv-5.8*

ubuntu/linux-aws-fips<5.4.0-1135.145+fips1

5.4.0-1135.145+fips1

ubuntu/linux-azure-fips<5.4.0-1140.147+fips1

5.4.0-1140.147+fips1

ubuntu/linux-fips<5.4.0-1109.119

5.4.0-1109.119

ubuntu/linux-gcp-fips<5.4.0-1139.148+fips1

5.4.0-1139.148+fips1

ubuntu/linux<5.15.0-125.135

5.15.0-125.135

ubuntu/linux-allwinner-5.19*

ubuntu/linux-aws<5.15.0-1072.78

5.15.0-1072.78

ubuntu/linux-aws-5.19*

ubuntu/linux-aws-6.2*

ubuntu/linux-aws-6.5*

ubuntu/linux-aws-6.8<6.8.0-1020.22~22.04.1

6.8.0-1020.22~22.04.1

ubuntu/linux-azure<5.15.0-1075.84

5.15.0-1075.84

ubuntu/linux-azure-5.19*

ubuntu/linux-azure-6.2*

ubuntu/linux-azure-6.5*

ubuntu/linux-azure-6.8<6.8.0-1020.23~22.04.1

6.8.0-1020.23~22.04.1

ubuntu/linux-azure-fde-5.19*

ubuntu/linux-azure-fde-6.2*

ubuntu/linux-gcp<5.15.0-1071.79

5.15.0-1071.79

ubuntu/linux-gcp-5.19*

ubuntu/linux-gcp-6.2*

ubuntu/linux-gcp-6.5*

ubuntu/linux-gcp-6.8<6.8.0-1019.21~22.04.1

6.8.0-1019.21~22.04.1

ubuntu/linux-gke<5.15.0-1069.75

5.15.0-1069.75

ubuntu/linux-gkeop<5.15.0-1055.62

5.15.0-1055.62

ubuntu/linux-hwe-5.19*

ubuntu/linux-hwe-6.2*

ubuntu/linux-hwe-6.5*

ubuntu/linux-hwe-6.8<6.8.0-50.51~22.04.1

6.8.0-50.51~22.04.1

ubuntu/linux-ibm<5.15.0-1065.68

5.15.0-1065.68

ubuntu/linux-ibm-6.8<6.8.0-1017.17~22.04.1

6.8.0-1017.17~22.04.1

ubuntu/linux-intel-iotg<5.15.0-1067.73

5.15.0-1067.73

ubuntu/linux-kvm<5.15.0-1069.74

5.15.0-1069.74

ubuntu/linux-lowlatency<5.15.0-125.135

5.15.0-125.135

ubuntu/linux-lowlatency-hwe-5.19*

ubuntu/linux-lowlatency-hwe-6.2*

ubuntu/linux-lowlatency-hwe-6.5*

ubuntu/linux-lowlatency-hwe-6.8<6.8.0-50.51.1~22.04.1

6.8.0-50.51.1~22.04.1

ubuntu/linux-nvidia<5.15.0-1067.68

5.15.0-1067.68

ubuntu/linux-nvidia-6.2*

ubuntu/linux-nvidia-6.8<6.8.0-1019.21~22.04.1

6.8.0-1019.21~22.04.1

ubuntu/linux-nvidia-tegra<5.15.0-1032.32

5.15.0-1032.32

ubuntu/linux-nvidia-tegra-igx<5.15.0-1020.20

5.15.0-1020.20

ubuntu/linux-oem-5.17*

ubuntu/linux-oem-6.0*

ubuntu/linux-oem-6.1*

ubuntu/linux-oem-6.5*

ubuntu/linux-oracle<5.15.0-1070.76

5.15.0-1070.76

ubuntu/linux-oracle-6.5*

ubuntu/linux-oracle-6.8<6.8.0-1017.18~22.04.1

6.8.0-1017.18~22.04.1

ubuntu/linux-raspi<5.15.0-1065.68

5.15.0-1065.68

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.19*

ubuntu/linux-riscv-6.5*

ubuntu/linux-riscv-6.8<6.8.0-50.51.1~22.04.1

6.8.0-50.51.1~22.04.1

ubuntu/linux-starfive-5.19*

ubuntu/linux-starfive-6.2*

ubuntu/linux-starfive-6.5*

ubuntu/linux-xilinx-zynqmp<5.15.0-1038.42

5.15.0-1038.42

ubuntu/linux-bluefield<5.15.0-1056.58

5.15.0-1056.58

ubuntu/linux-intel-iot-realtime<5.15.0-1066.68

5.15.0-1066.68

ubuntu/linux-realtime<5.15.0-1073.81

5.15.0-1073.81

ubuntu/linux-realtime-6.8<6.8.1-1013.14~22.04.1

6.8.1-1013.14~22.04.1

ubuntu/linux-aws-fips<5.15.0-1072.78+fips1

5.15.0-1072.78+fips1

ubuntu/linux-azure-fips<5.15.0-1075.84+fips1

5.15.0-1075.84+fips1

ubuntu/linux-fips<5.15.0-125.135+fips1

5.15.0-125.135+fips1

ubuntu/linux-gcp-fips<5.15.0-1071.79+fips1

5.15.0-1071.79+fips1

ubuntu/linux<6.8.0-50.51

6.8.0-50.51

ubuntu/linux-aws<6.8.0-1020.22

6.8.0-1020.22

ubuntu/linux-azure<6.8.0-1020.23

6.8.0-1020.23

ubuntu/linux-gcp<6.8.0-1019.21

6.8.0-1019.21

ubuntu/linux-gke<6.8.0-1015.19

6.8.0-1015.19

ubuntu/linux-gkeop<6.8.0-1002.4

6.8.0-1002.4

ubuntu/linux-ibm<6.8.0-1017.17

6.8.0-1017.17

ubuntu/linux-lowlatency<6.8.0-50.51.1

6.8.0-50.51.1

ubuntu/linux-nvidia<6.8.0-1019.21

6.8.0-1019.21

ubuntu/linux-nvidia-lowlatency<6.8.0-1019.21.1

6.8.0-1019.21.1

ubuntu/linux-oem-6.8<6.8.0-1018.18

6.8.0-1018.18

ubuntu/linux-oracle<6.8.0-1017.18

6.8.0-1017.18

ubuntu/linux-raspi<6.8.0-1016.18

6.8.0-1016.18

ubuntu/linux-riscv<6.8.0-50.51.1

6.8.0-50.51.1

ubuntu/linux-xilinx<6.8.0-1017.18

6.8.0-1017.18

ubuntu/linux-raspi-realtime<6.8.0-2015.16

6.8.0-2015.16

ubuntu/linux-realtime<6.8.1-1013.14

6.8.1-1013.14

ubuntu/linux-fips<6.8.0-78.78+fips1

6.8.0-78.78+fips1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1
Upgrade
Upgrade ubuntu/linux-aws-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1135.145~18.04.1
Upgrade
Upgrade ubuntu/linux-azure-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1140.147~18.04.1
Upgrade
Upgrade ubuntu/linux-gcp-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1139.148~18.04.1
Upgrade
Upgrade ubuntu/linux-hwe-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-200.220~18.04.1
Upgrade
Upgrade ubuntu/linux-ibm-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1082.87~18.04.1
Upgrade
Upgrade ubuntu/linux-oracle-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1134.143~18.04.1
Upgrade
Upgrade ubuntu/linux-raspi-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1119.131~18.04.1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.4.0-200.220
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.4.0-1135.145
Upgrade
Upgrade ubuntu/linux-aws-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1072.78~20.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.4.0-1140.147
Upgrade
Upgrade ubuntu/linux-azure-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1078.87~20.04.1
Upgrade
Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.
Fixed in 5.4.0-1095.102
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.4.0-1139.148
Upgrade
Upgrade ubuntu/linux-gcp-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1071.79~20.04.1
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 5.4.0-1102.106
Upgrade
Upgrade ubuntu/linux-gkeop-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1055.62~20.04.1
Upgrade
Upgrade ubuntu/linux-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-125.135~20.04.1
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 5.4.0-1082.87
Upgrade
Upgrade ubuntu/linux-ibm-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1065.68~20.04.1
Upgrade
Upgrade ubuntu/linux-intel-iotg-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1067.73~20.04.1
Upgrade
Upgrade ubuntu/linux-iot to a version that resolves this vulnerability.
Fixed in 5.4.0-1044.45
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.4.0-1123.131
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-125.135~20.04.1
Upgrade
Upgrade ubuntu/linux-nvidia-tegra-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1032.32~20.04.1
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.4.0-1134.143
Upgrade
Upgrade ubuntu/linux-oracle-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1070.76~20.04.1
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.4.0-1119.131
Upgrade
Upgrade ubuntu/linux-riscv-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1068.72~20.04.1
Upgrade
Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.
Fixed in 5.4.0-1054.58
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1135.145+fips1
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1140.147+fips1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1109.119
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1139.148+fips1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.15.0-125.135
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.15.0-1072.78
Upgrade
Upgrade ubuntu/linux-aws-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1020.22~22.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.15.0-1075.84
Upgrade
Upgrade ubuntu/linux-azure-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1020.23~22.04.1
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.15.0-1071.79
Upgrade
Upgrade ubuntu/linux-gcp-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1019.21~22.04.1
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 5.15.0-1069.75
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 5.15.0-1055.62
Upgrade
Upgrade ubuntu/linux-hwe-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-50.51~22.04.1
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 5.15.0-1065.68
Upgrade
Upgrade ubuntu/linux-ibm-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1017.17~22.04.1
Upgrade
Upgrade ubuntu/linux-intel-iotg to a version that resolves this vulnerability.
Fixed in 5.15.0-1067.73
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.15.0-1069.74
Upgrade
Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.
Fixed in 5.15.0-125.135
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-50.51.1~22.04.1
Upgrade
Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.
Fixed in 5.15.0-1067.68
Upgrade
Upgrade ubuntu/linux-nvidia-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1019.21~22.04.1
Upgrade
Upgrade ubuntu/linux-nvidia-tegra to a version that resolves this vulnerability.
Fixed in 5.15.0-1032.32
Upgrade
Upgrade ubuntu/linux-nvidia-tegra-igx to a version that resolves this vulnerability.
Fixed in 5.15.0-1020.20
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.15.0-1070.76
Upgrade
Upgrade ubuntu/linux-oracle-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1017.18~22.04.1
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.15.0-1065.68
Upgrade
Upgrade ubuntu/linux-riscv-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-50.51.1~22.04.1
Upgrade
Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.
Fixed in 5.15.0-1038.42
Upgrade
Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.
Fixed in 5.15.0-1056.58
Upgrade
Upgrade ubuntu/linux-intel-iot-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1066.68
Upgrade
Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1073.81
Upgrade
Upgrade ubuntu/linux-realtime-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.1-1013.14~22.04.1
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1072.78+fips1
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1075.84+fips1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-125.135+fips1
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1071.79+fips1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 6.8.0-50.51
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 6.8.0-1020.22
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 6.8.0-1020.23
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 6.8.0-1019.21
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 6.8.0-1015.19
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 6.8.0-1002.4
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 6.8.0-1017.17
Upgrade
Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.
Fixed in 6.8.0-50.51.1
Upgrade
Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.
Fixed in 6.8.0-1019.21
Upgrade
Upgrade ubuntu/linux-nvidia-lowlatency to a version that resolves this vulnerability.
Fixed in 6.8.0-1019.21.1
Upgrade
Upgrade ubuntu/linux-oem-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1018.18
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 6.8.0-1017.18
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 6.8.0-1016.18
Upgrade
Upgrade ubuntu/linux-riscv to a version that resolves this vulnerability.
Fixed in 6.8.0-50.51.1
Upgrade
Upgrade ubuntu/linux-xilinx to a version that resolves this vulnerability.
Fixed in 6.8.0-1017.18
Upgrade
Upgrade ubuntu/linux-raspi-realtime to a version that resolves this vulnerability.
Fixed in 6.8.0-2015.16
Upgrade
Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.
Fixed in 6.8.1-1013.14
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 6.8.0-78.78+fips1
Configuration
When test->highmem = alloc_pages() fails, do not call __free_pages(test->highmem); return -ENOMEM instead of success.
Linux kernel mmc_test alloc_pages() failure handling = -ENOMEM

Event History

Sep 11, 2024

CVE Published

via MITRE·03:13 PM

Data Sourced

via MITRE·03:13 PM

Description

Data Sourced

via OSV·04:15 PM

DescriptionSeverityAffected Software

Data Sourced

via NVD·04:15 PM

RemedyDescriptionSeverityWeaknessAffected Software

Oct 12, 2024

Data Sourced

via Microsoft·07:00 AM

DescriptionSeverityWeaknessAffected Software

Parent advisories

This vulnerability appears in the following advisories.

DSA-5782

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is the severity of CVE-2024-45028?

CVE-2024-45028 is a moderate severity vulnerability in the Linux kernel that may lead to a NULL dereference error.

How do I fix CVE-2024-45028?

To fix CVE-2024-45028, update to a patched version of the Linux kernel including versions 5.10.226-1 or 6.1.123-1.

What versions of the Linux kernel are affected by CVE-2024-45028?

CVE-2024-45028 affects Linux kernel versions from 2.6.27 up to but not including 6.11-rc5.

What causes the vulnerability CVE-2024-45028?

CVE-2024-45028 is caused by a NULL dereference that occurs when page allocation fails in the Linux kernel's mmc_test module.

Is CVE-2024-45028 exploitable?

Yes, CVE-2024-45028 can be exploited under certain conditions, potentially leading to system crashes or other reliability issues.

CVE-2024-45028: mmc: mmc_test: Fix NULL dereference on allocation failure

Affected Software

Remediation

Event History

Parent advisories

Peer vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2024-45028?

How do I fix CVE-2024-45028?

What versions of the Linux kernel are affected by CVE-2024-45028?

What causes the vulnerability CVE-2024-45028?

Is CVE-2024-45028 exploitable?

Company

Resources

Contact