CVE-2024-45028: mmc: mmc_test: Fix NULL dereference on allocation failure
In the Linux kernel, the following vulnerability has been resolved:
mmc: mmctest: Fix NULL dereference on allocation failure
If the "test->highmem = allocpages()" allocation fails then calling freepages(test->highmem) will result in a NULL dereference. Also change the error code to -ENOMEM instead of returning success.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-45028?
CVE-2024-45028 is a moderate severity vulnerability in the Linux kernel that may lead to a NULL dereference error.
How do I fix CVE-2024-45028?
To fix CVE-2024-45028, update to a patched version of the Linux kernel including versions 5.10.226-1 or 6.1.123-1.
What versions of the Linux kernel are affected by CVE-2024-45028?
CVE-2024-45028 affects Linux kernel versions from 2.6.27 up to but not including 6.11-rc5.
What causes the vulnerability CVE-2024-45028?
CVE-2024-45028 is caused by a NULL dereference that occurs when page allocation fails in the Linux kernel's mmc_test module.
Is CVE-2024-45028 exploitable?
Yes, CVE-2024-45028 can be exploited under certain conditions, potentially leading to system crashes or other reliability issues.