Riskcovery

CVE-2024-35916

dma-buf: Fix NULL pointer dereference in sanitycheck()

State
Published
Severity
5.3 Medium
Published
May 19, 2024
Updated
May 11, 2026
Reserved
May 17, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

dma-buf: Fix NULL pointer dereference in sanitycheck()

If due to a memory allocation failure mock_chain() returns NULL, it is passed to dma_fence_enable_sw_signaling() resulting in NULL pointer dereference there.

Call dma_fence_enable_sw_signaling() only if mock_chain() succeeds.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Scores

CVSSScoreVectorSource
3.15.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:LCISA-ADP

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • d62c43a953ce02d54521ec06217d0c2ed6d489af to before 0336995512cdab0c65e99e4cdd47c4606debe14eAffected
  • d62c43a953ce02d54521ec06217d0c2ed6d489af to before 156c226cbbdcf5f3bce7b2408a33b59fab7fae2cAffected
  • d62c43a953ce02d54521ec06217d0c2ed6d489af to before eabf131cba1db12005a68378305f13b9090a7a6bAffected
  • d62c43a953ce02d54521ec06217d0c2ed6d489af to before 2295bd846765c766701e666ed2e4b35396be25e6Affected
LinuxLinux
  • 6.1Affected
  • before 6.1Not affected
  • 6.1.85 through 6.1.*Not affected
  • 6.6.26 through 6.6.*Not affected
  • 6.8.5 through 6.8.*Not affected
  • 6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.