First published: Tue Nov 19 2024(Updated: )
In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: scm: fix a NULL-pointer dereference Some SCM calls can be invoked with __scm being NULL (the driver may not have been and will not be probed as there's no SCM entry in device-tree). Make sure we don't dereference a NULL pointer.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Affected Software | Affected Version | How to fix |
---|---|---|
Linux Kernel | >=6.11<6.11.8 | |
Linux Kernel | =6.12-rc1 | |
Linux Kernel | =6.12-rc2 | |
Linux Kernel | =6.12-rc3 | |
Linux Kernel | =6.12-rc4 | |
Linux Kernel | =6.12-rc5 | |
Linux Kernel | =6.12-rc6 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2024-53069 has a severity rating of medium due to the potential for a NULL-pointer dereference.
To fix CVE-2024-53069, update the Linux kernel to version 6.12 or later.
CVE-2024-53069 affects Linux kernel versions 6.11.0 to 6.11.8 and 6.12 release candidates.
The impact of CVE-2024-53069 could lead to system instability due to potential crashes linked to NULL-pointer dereferences.
There is no specific workaround for CVE-2024-53069; timely kernel updates are strongly recommended.