CVE-2024-50070: pinctrl: stm32: check devm_kasprintf() returned value
In the Linux kernel, the following vulnerability has been resolved:
pinctrl: stm32: check devmkasprintf() returned value
devmkasprintf() can return a NULL pointer on failure but this returned value is not checked. Fix this lack and check the returned value.
Found by code review.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-50070?
The severity of CVE-2024-50070 is currently classified as moderate.
How do I fix CVE-2024-50070?
To fix CVE-2024-50070, ensure that updates for the affected Linux kernel versions are applied, following the recommended patching procedures.
Which versions of the Linux kernel are affected by CVE-2024-50070?
CVE-2024-50070 affects Linux kernel versions from 6.6 up to 6.6.58, between 6.7 and 6.11.5, and specific release candidates 6.12-rc1, 6.12-rc2, and 6.12-rc3.
What is the main issue in CVE-2024-50070?
CVE-2024-50070 addresses a lack of NULL pointer checks on the return value of devm_kasprintf() in the pinctrl subsystem of the Linux kernel.
How was CVE-2024-50070 discovered?
CVE-2024-50070 was discovered through a code review process.