Riskcovery

CVE-2024-43875

PCI: endpoint: Clean up error handling in vpci_scan_bus()

State
Published
Severity
Not scored
Published
Aug 21, 2024
Updated
May 23, 2026
Reserved
Aug 17, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

PCI: endpoint: Clean up error handling in vpci_scan_bus()

Smatch complains about inconsistent NULL checking in vpci_scan_bus():

drivers/pci/endpoint/functions/pci-epf-vntb.c:1024 vpci_scan_bus() error: we previously assumed 'vpci_bus' could be null (see line 1021)

Instead of printing an error message and then crashing we should return an error code and clean up.

Also the NULL check is reversed so it prints an error for success instead of failure.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • e2b6ef72b7aea9d7d480d2df499bcd1c93247abb to before 24414c842a24d0fd498f9db6d2a762a8dddf1832Affected
  • e35f56bb03304abc92c928b641af41ca372966bb to before 7d368de78b60088ec9031c60c88976c0063ea4c0Affected
  • e35f56bb03304abc92c928b641af41ca372966bb to before 0e27e2e8697b8ce96cdef43f135426525d9d1f8fAffected
  • e35f56bb03304abc92c928b641af41ca372966bb to before b9e8695246bcfc028341470cbf92630cdc1ba36bAffected
  • e35f56bb03304abc92c928b641af41ca372966bb to before 8e0f5a96c534f781e8c57ca30459448b3bfe5429Affected
  • 5.15.153 to before 5.15.165Affected
LinuxLinux
  • 6.0Affected
  • before 6.0Not affected
  • 5.15.165 through 5.15.*Not affected
  • 6.1.103 through 6.1.*Not affected
  • 6.6.44 through 6.6.*Not affected
  • 6.10.3 through 6.10.*Not affected
  • 6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.