CVE-2024-38637

greybus: lights: check return of get_channel_from_mode

State: Published
Severity: Not scored
Published: Jun 21, 2024
Updated: May 11, 2026
Reserved: Jun 18, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

greybus: lights: check return of get_channel_from_mode

If channel for the given node is not found we return null from get_channel_from_mode. Make sure we validate the return pointer before using it in two of the missing places.

This was originally reported in [0]: Found by Linux Verification Center (linuxtesting.org) with SVACE.

[0] https://lore.kernel.org/all/20240301190425.120605-1-m.lobanov@rosalinux.ru

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	2870b52bae4c81823ffcb3ed2b0626fb39d64f48 to before 8f4a76d477f0cc3c54d512f07f6f88c8e1c1e07bAffected 2870b52bae4c81823ffcb3ed2b0626fb39d64f48 to before e2c64246e5dc8c0d35ec41770b85e2b4cafdff21Affected 2870b52bae4c81823ffcb3ed2b0626fb39d64f48 to before eac10cf3a97ffd4b4deb0a29f57c118225a42850Affected 2870b52bae4c81823ffcb3ed2b0626fb39d64f48 to before 330f6bcdcef03f70f81db5f2ed6747af656a09f2Affected 2870b52bae4c81823ffcb3ed2b0626fb39d64f48 to before 9b41a9b9c8be8c552f10633453fdb509e83b66f8Affected 2870b52bae4c81823ffcb3ed2b0626fb39d64f48 to before 518e2c46b5dbce40b1aa0100001d03c3ceaa7d38Affected 2870b52bae4c81823ffcb3ed2b0626fb39d64f48 to before 895cdd9aa9546523df839f9cc1488a0ecc1e0731Affected 2870b52bae4c81823ffcb3ed2b0626fb39d64f48 to before a1ba19a1ae7cd1e324685ded4ab563e78fe68648Affected
LinuxLinux	4.9Affected before 4.9Not affected 4.19.316 through 4.19.Not affected 5.4.278 through 5.4.Not affected 5.10.219 through 5.10.Not affected 5.15.161 through 5.15.Not affected 6.1.93 through 6.1.Not affected 6.6.33 through 6.6.Not affected 6.9.4 through 6.9.*Not affected 6.10 and laterNot affected

Product

Versions

LinuxLinux

2870b52bae4c81823ffcb3ed2b0626fb39d64f48 to before 8f4a76d477f0cc3c54d512f07f6f88c8e1c1e07bAffected
2870b52bae4c81823ffcb3ed2b0626fb39d64f48 to before e2c64246e5dc8c0d35ec41770b85e2b4cafdff21Affected
2870b52bae4c81823ffcb3ed2b0626fb39d64f48 to before eac10cf3a97ffd4b4deb0a29f57c118225a42850Affected
2870b52bae4c81823ffcb3ed2b0626fb39d64f48 to before 330f6bcdcef03f70f81db5f2ed6747af656a09f2Affected
2870b52bae4c81823ffcb3ed2b0626fb39d64f48 to before 9b41a9b9c8be8c552f10633453fdb509e83b66f8Affected
2870b52bae4c81823ffcb3ed2b0626fb39d64f48 to before 518e2c46b5dbce40b1aa0100001d03c3ceaa7d38Affected
2870b52bae4c81823ffcb3ed2b0626fb39d64f48 to before 895cdd9aa9546523df839f9cc1488a0ecc1e0731Affected
2870b52bae4c81823ffcb3ed2b0626fb39d64f48 to before a1ba19a1ae7cd1e324685ded4ab563e78fe68648Affected

LinuxLinux

4.9Affected
before 4.9Not affected
4.19.316 through 4.19.*Not affected
5.4.278 through 5.4.*Not affected
5.10.219 through 5.10.*Not affected
5.15.161 through 5.15.*Not affected
6.1.93 through 6.1.*Not affected
6.6.33 through 6.6.*Not affected
6.9.4 through 6.9.*Not affected
6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.