CVE-2024-45028

mmc: mmc_test: Fix NULL dereference on allocation failure

State: Published
Severity: Not scored
Published: Sep 11, 2024
Updated: May 11, 2026
Reserved: Aug 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

mmc: mmc_test: Fix NULL dereference on allocation failure

If the "test->highmem = alloc_pages()" allocation fails then calling __free_pages(test->highmem) will result in a NULL dereference. Also change the error code to -ENOMEM instead of returning success.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	2661081f5ab9cb25359d27f88707a018cf4e68e9 to before e97be13a9f51284da450dd2a592e3fa87b49cdc9Affected 2661081f5ab9cb25359d27f88707a018cf4e68e9 to before 2b507b03991f44dfb202fc2a82c9874d1b1f0c06Affected 2661081f5ab9cb25359d27f88707a018cf4e68e9 to before 9b9ba386d7bfdbc38445932c90fa9444c0524beaAffected 2661081f5ab9cb25359d27f88707a018cf4e68e9 to before e40515582141a9e7c84b269be699c05236a499a6Affected 2661081f5ab9cb25359d27f88707a018cf4e68e9 to before 3b4e76ceae5b5a46c968bd952f551ce173809f63Affected 2661081f5ab9cb25359d27f88707a018cf4e68e9 to before cac2815f49d343b2f0acc4973d2c14918ac3ab0cAffected 2661081f5ab9cb25359d27f88707a018cf4e68e9 to before ecb15b8ca12c0cbdab81e307e9795214d8b90890Affected 2661081f5ab9cb25359d27f88707a018cf4e68e9 to before a1e627af32ed60713941cbfc8075d44cad07f6ddAffected
LinuxLinux	2.6.27Affected before 2.6.27Not affected 4.19.321 through 4.19.Not affected 5.4.283 through 5.4.Not affected 5.10.225 through 5.10.Not affected 5.15.166 through 5.15.Not affected 6.1.107 through 6.1.Not affected 6.6.48 through 6.6.Not affected 6.10.7 through 6.10.*Not affected 6.11 and laterNot affected

Product

Versions

LinuxLinux

2661081f5ab9cb25359d27f88707a018cf4e68e9 to before e97be13a9f51284da450dd2a592e3fa87b49cdc9Affected
2661081f5ab9cb25359d27f88707a018cf4e68e9 to before 2b507b03991f44dfb202fc2a82c9874d1b1f0c06Affected
2661081f5ab9cb25359d27f88707a018cf4e68e9 to before 9b9ba386d7bfdbc38445932c90fa9444c0524beaAffected
2661081f5ab9cb25359d27f88707a018cf4e68e9 to before e40515582141a9e7c84b269be699c05236a499a6Affected
2661081f5ab9cb25359d27f88707a018cf4e68e9 to before 3b4e76ceae5b5a46c968bd952f551ce173809f63Affected
2661081f5ab9cb25359d27f88707a018cf4e68e9 to before cac2815f49d343b2f0acc4973d2c14918ac3ab0cAffected
2661081f5ab9cb25359d27f88707a018cf4e68e9 to before ecb15b8ca12c0cbdab81e307e9795214d8b90890Affected
2661081f5ab9cb25359d27f88707a018cf4e68e9 to before a1e627af32ed60713941cbfc8075d44cad07f6ddAffected

LinuxLinux

2.6.27Affected
before 2.6.27Not affected
4.19.321 through 4.19.*Not affected
5.4.283 through 5.4.*Not affected
5.10.225 through 5.10.*Not affected
5.15.166 through 5.15.*Not affected
6.1.107 through 6.1.*Not affected
6.6.48 through 6.6.*Not affected
6.10.7 through 6.10.*Not affected
6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.