CVE-2024-46685

pinctrl: single: fix potential NULL dereference in pcs_get_function()

State
Published
Severity
Not scored
Published
Sep 13, 2024
Updated
May 11, 2026
Reserved
Sep 11, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

pinctrl: single: fix potential NULL dereference in pcs_get_function()

pinmux_generic_get_function() can return NULL and the pointer 'function' was dereferenced without checking against NULL. Add checking of pointer 'function' in pcs_get_function().

Found by code review.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 571aec4df5b72a80f80d1e524da8fbd7ff525c98 to before 0a2bab5ed161318f57134716accba0a30f3af191Affected
  • 571aec4df5b72a80f80d1e524da8fbd7ff525c98 to before 2cea369a5c2e85ab14ae716da1d1cc6d25c85e11Affected
  • 571aec4df5b72a80f80d1e524da8fbd7ff525c98 to before 4e9436375fcc9bd2a60ee96aba6ed53f7a377d10Affected
  • 571aec4df5b72a80f80d1e524da8fbd7ff525c98 to before 6341c2856785dca7006820b127278058a180c075Affected
  • 571aec4df5b72a80f80d1e524da8fbd7ff525c98 to before 8f0bd526921b6867c2f10a83cd4fd14139adcd92Affected
  • 571aec4df5b72a80f80d1e524da8fbd7ff525c98 to before 4ed45fe99ec9e3c9478bd634624cd05a57d002f7Affected
  • 571aec4df5b72a80f80d1e524da8fbd7ff525c98 to before 292151af6add3e5ab11b2e9916cffa5f52859a1fAffected
  • 571aec4df5b72a80f80d1e524da8fbd7ff525c98 to before 1c38a62f15e595346a1106025722869e87ffe044Affected
LinuxLinux
  • 4.11Affected
  • before 4.11Not affected
  • 4.19.321 through 4.19.*Not affected
  • 5.4.283 through 5.4.*Not affected
  • 5.10.225 through 5.10.*Not affected
  • 5.15.166 through 5.15.*Not affected
  • 6.1.108 through 6.1.*Not affected
  • 6.6.49 through 6.6.*Not affected
  • 6.10.8 through 6.10.*Not affected
  • 6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.