CVE-2024-50069: pinctrl: apple: check devm_kasprintf() returned value
In the Linux kernel, the following vulnerability has been resolved:
pinctrl: apple: check devmkasprintf() returned value
devmkasprintf() can return a NULL pointer on failure but this returned value is not checked. Fix this lack and check the returned value.
Found by code review.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-50069?
CVE-2024-50069 has been rated as a medium severity vulnerability due to the potential for NULL pointer dereference.
How do I fix CVE-2024-50069?
To mitigate CVE-2024-50069, update your Linux kernel to the latest stable version that includes the fix.
Which versions of the Linux kernel are affected by CVE-2024-50069?
CVE-2024-50069 affects Linux kernel versions between 5.16 and 6.1.114, 6.2 to 6.6.58, and 6.7 to 6.11.5, as well as the 6.12-rc1, 6.12-rc2, and 6.12-rc3 releases.
What type of vulnerability is CVE-2024-50069?
CVE-2024-50069 is a vulnerability in the pinctrl subsystem of the Linux kernel related to inadequate error handling.
Who discovered CVE-2024-50069?
CVE-2024-50069 was discovered through code review.