CVE-2024-47743: KEYS: prevent NULL pointer dereference in find_asymmetric_key()
In the Linux kernel, the following vulnerability has been resolved:
KEYS: prevent NULL pointer dereference in findasymmetrickey()
In findasymmetrickey(), if all NULLs are passed in the id{0,1,2} arguments, the kernel will first emit WARN but then have an oops because id2 gets dereferenced anyway.
Add the missing id2 check and move WARNON() to the final else branch to avoid duplicate NULL checks.
Found by Linux Verification Center (linuxtesting.org) with Svace static analysis tool.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-47743?
CVE-2024-47743 is classified as a high severity vulnerability due to the potential for a kernel panic caused by a NULL pointer dereference.
How do I fix CVE-2024-47743?
To mitigate CVE-2024-47743, you should update the Linux kernel to a version that has resolved this vulnerability.
Which versions of the Linux kernel are affected by CVE-2024-47743?
CVE-2024-47743 affects multiple versions of the Linux kernel between 5.17 and 6.6.54, as well as additional specific versions.
What happens if CVE-2024-47743 is exploited?
Exploitation of CVE-2024-47743 may lead to a kernel panic and potential denial of service on affected systems.
Is there a known workaround for CVE-2024-47743?
There are no known workarounds for CVE-2024-47743, and the recommended action is to apply the necessary kernel updates.