CVE-2024-46685: pinctrl: single: fix potential NULL dereference in pcs_get_function()
In the Linux kernel, the following vulnerability has been resolved:
pinctrl: single: fix potential NULL dereference in pcsgetfunction()
pinmuxgenericgetfunction() can return NULL and the pointer 'function' was dereferenced without checking against NULL. Add checking of pointer 'function' in pcsgetfunction().
Found by code review.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-46685?
CVE-2024-46685 is considered to have a medium severity due to its potential for causing a NULL dereference leading to application crashes.
How do I fix CVE-2024-46685?
To fix CVE-2024-46685, update the Linux Kernel to the patched versions such as 5.10.226-1 or 6.1.123-1.
Which Linux Kernel versions are affected by CVE-2024-46685?
CVE-2024-46685 affects Linux Kernel versions from 4.11 to 4.19.321, 4.20 to 5.4.283, 5.5 to 5.10.225, and others up to 6.11-rc5.
How can I verify if my system is vulnerable to CVE-2024-46685?
You can verify vulnerability by checking your Linux Kernel version against the affected range outlined in CVE-2024-46685.
Is there a workaround for CVE-2024-46685?
There is no official workaround for CVE-2024-46685, and it is recommended to apply the necessary updates as soon as possible.