CVE-2024-43824

PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()

State
Published
Severity
Not scored
Published
Aug 17, 2024
Updated
Oct 30, 2026
Reserved
Aug 17, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()

Instead of getting the epc_features from pci_epc_get_features() API, use the cached pci_epf_test::epc_features value to avoid the NULL check. Since the NULL check is already performed in pci_epf_test_bind(), having one more check in pci_epf_test_core_init() is redundant and it is not possible to hit the NULL pointer dereference.

Also with commit a01e7214bef9 ("PCI: endpoint: Remove "core_init_notifier" flag"), 'epc_features' got dereferenced without the NULL check, leading to the following false positive Smatch warning:

drivers/pci/endpoint/functions/pci-epf-test.c:784 pci_epf_test_core_init() error: we previously assumed 'epc_features' could be null (see line 747)

Thus, remove the redundant NULL check and also use the epc_features:: {msix_capable/msi_capable} flags directly to avoid local variables.

[kwilczynski: commit log]

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 5e50ee27d4a52a817ab152128c48690ec7c5cdf1 to before 5c71be3476088ab490d48a468b54d791f91241b8Affected
  • 5e50ee27d4a52a817ab152128c48690ec7c5cdf1 to before 97cee643a825808711cc78475fd61a30824b7a0fAffected
  • 5e50ee27d4a52a817ab152128c48690ec7c5cdf1 to before af4ad016abb1632ff7ee598a6037952b495e5b80Affected
  • 5e50ee27d4a52a817ab152128c48690ec7c5cdf1 to before 5a5095a8bd1bd349cce1c879e5e44407a34dda8aAffected
LinuxLinux
  • 5.7Affected
  • before 5.7Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.10.3 through 6.10.*Not affected
  • 6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.