CVE-2024-38637

June 21, 2024, 11:22 a.m.

None
No Score

Description

In the Linux kernel, the following vulnerability has been resolved: greybus: lights: check return of get_channel_from_mode If channel for the given node is not found we return null from get_channel_from_mode. Make sure we validate the return pointer before using it in two of the missing places. This was originally reported in [0]: Found by Linux Verification Center (linuxtesting.org) with SVACE. [0] https://lore.kernel.org/all/20240301190425.120605-1-m.lobanov@rosalinux.ru

Product(s) Impacted

Product Versions
Linux Kernel

Weaknesses

Common security weaknesses mapped to this vulnerability.

References

https://git.kernel.org/stable/c/330f6bcdcef03f70f81db5f2ed6747af656a09f2
https://git.kernel.org/stable/c/518e2c46b5dbce40b1aa0100001d03c3ceaa7d38
https://git.kernel.org/stable/c/895cdd9aa9546523df839f9cc1488a0ecc1e0731
https://git.kernel.org/stable/c/8f4a76d477f0cc3c54d512f07f6f88c8e1c1e07b
https://git.kernel.org/stable/c/9b41a9b9c8be8c552f10633453fdb509e83b66f8
https://git.kernel.org/stable/c/a1ba19a1ae7cd1e324685ded4ab563e78fe68648
https://git.kernel.org/stable/c/e2c64246e5dc8c0d35ec41770b85e2b4cafdff21
https://git.kernel.org/stable/c/eac10cf3a97ffd4b4deb0a29f57c118225a42850

Tags

416baaa9-dc9f-4396-8d5f-8c081fb06d67
2024-06-21
CVE-2024-38637

Timeline

Published: June 21, 2024, 11:15 a.m.
Last Modified: June 21, 2024, 11:22 a.m.

Status : Awaiting Analysis

CVE has been marked for Analysis. Normally once in this state the CVE will be analyzed by NVD staff within 24 hours.

More info

Source

416baaa9-dc9f-4396-8d5f-8c081fb06d67

*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.