CVE-2024-53069: firmware: qcom: scm: fix a NULL-pointer dereference
In the Linux kernel, the following vulnerability has been resolved:
firmware: qcom: scm: fix a NULL-pointer dereference
Some SCM calls can be invoked with scm being NULL (the driver may not have been and will not be probed as there's no SCM entry in device-tree). Make sure we don't dereference a NULL pointer.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-53069?
CVE-2024-53069 has a severity rating of medium due to the potential for a NULL-pointer dereference.
How do I fix CVE-2024-53069?
To fix CVE-2024-53069, update the Linux kernel to version 6.12 or later.
Which versions of the Linux kernel are affected by CVE-2024-53069?
CVE-2024-53069 affects Linux kernel versions 6.11.0 to 6.11.8 and 6.12 release candidates.
What is the impact of CVE-2024-53069 on systems?
The impact of CVE-2024-53069 could lead to system instability due to potential crashes linked to NULL-pointer dereferences.
Is there a workaround for CVE-2024-53069 if I cannot update the kernel?
There is no specific workaround for CVE-2024-53069; timely kernel updates are strongly recommended.