CVE-2024-56689: PCI: endpoint: epf-mhi: Avoid NULL dereference if DT lacks 'mmio'
In the Linux kernel, the following vulnerability has been resolved:
PCI: endpoint: epf-mhi: Avoid NULL dereference if DT lacks 'mmio'
If platformgetresourcebyname() fails and returns NULL because DT lacks an 'mmio' property for the MHI endpoint, dereferencing res->start will cause a NULL pointer access. Add a check to prevent it.
[kwilczynski: error message update per the review feedback] [bhelgaas: commit log]
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-56689?
CVE-2024-56689 has been classified with a severity level that indicates potential risks related to NULL dereference vulnerabilities in the Linux kernel.
How do I fix CVE-2024-56689?
To fix CVE-2024-56689, update your Linux kernel to a version that includes the security fix, such as those specified in the advisory.
Which versions of the Linux kernel are affected by CVE-2024-56689?
CVE-2024-56689 affects Linux kernel versions from 6.5 to 6.6.64, as well as versions from 6.7 to 6.11.11, and from 6.12 to 6.12.2.
What is the vulnerability type of CVE-2024-56689?
CVE-2024-56689 is classified as a NULL dereference vulnerability within the PCI endpoint handling in the Linux kernel.
Is CVE-2024-56689 related to any specific Linux distributions?
CVE-2024-56689 is relevant to various Linux distributions that implement affected versions of the Linux kernel.