CVE-2024-49879: drm: omapdrm: Add missing check for alloc_ordered_workqueue
In the Linux kernel, the following vulnerability has been resolved:
drm: omapdrm: Add missing check for allocorderedworkqueue
As it may return NULL pointer and cause NULL pointer dereference. Add check for the return value of allocorderedworkqueue.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-49879?
The severity of CVE-2024-49879 is classified as medium due to the potential for a NULL pointer dereference in the Linux kernel.
How do I fix CVE-2024-49879?
To fix CVE-2024-49879, update your Linux kernel to a version that includes the patch addressing this vulnerability.
Which versions of the Linux kernel are affected by CVE-2024-49879?
CVE-2024-49879 affects Linux kernel versions from 4.11 to 5.10.227, 5.11 to 5.15.168, 5.16 to 6.1.113, 6.2 to 6.6.55, and 6.7 to 6.10.14.
What causes CVE-2024-49879 in the Linux kernel?
CVE-2024-49879 is caused by a missing check for the return value of the alloc_ordered_workqueue function, which may return a NULL pointer.
Is there a specific patch for CVE-2024-49879?
Yes, specific patches are available in subsequent releases of the Linux kernel that address the NULL pointer dereference issue identified in CVE-2024-49879.