CVE-2024-46739

uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind

State: Published
Severity: Not scored
Published: Sep 18, 2024
Updated: May 11, 2026
Reserved: Sep 11, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind

For primary VM Bus channels, primary_channel pointer is always NULL. This pointer is valid only for the secondary channels. Also, rescind callback is meant for primary channels only.

Fix NULL pointer dereference by retrieving the device_obj from the parent for the primary channel.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	ca3cda6fcf1e922213a0cc58e708ffb999151db3 to before 3d414b64ecf6fd717d7510ffb893c6f23acbf50eAffected ca3cda6fcf1e922213a0cc58e708ffb999151db3 to before f38f46da80a2ab7d1b2f8fcb444c916034a2dac4Affected ca3cda6fcf1e922213a0cc58e708ffb999151db3 to before 1d8e020e51ab07e40f9dd00b52f1da7d96fec04cAffected ca3cda6fcf1e922213a0cc58e708ffb999151db3 to before 3005091cd537ef8cdb7530dcb2ecfba8d2ef475cAffected ca3cda6fcf1e922213a0cc58e708ffb999151db3 to before 2be373469be1774bbe03b0fa7e2854e65005b1ccAffected ca3cda6fcf1e922213a0cc58e708ffb999151db3 to before de6946be9c8bc7d2279123433495af7c21011b99Affected ca3cda6fcf1e922213a0cc58e708ffb999151db3 to before 928e399e84f4e80307dce44e89415115c473275bAffected ca3cda6fcf1e922213a0cc58e708ffb999151db3 to before fb1adbd7e50f3d2de56d0a2bb0700e2e819a329eAffected
LinuxLinux	4.16Affected before 4.16Not affected 4.19.322 through 4.19.Not affected 5.4.284 through 5.4.Not affected 5.10.226 through 5.10.Not affected 5.15.167 through 5.15.Not affected 6.1.110 through 6.1.Not affected 6.6.51 through 6.6.Not affected 6.10.10 through 6.10.*Not affected 6.11 and laterNot affected

Product

Versions

LinuxLinux

ca3cda6fcf1e922213a0cc58e708ffb999151db3 to before 3d414b64ecf6fd717d7510ffb893c6f23acbf50eAffected
ca3cda6fcf1e922213a0cc58e708ffb999151db3 to before f38f46da80a2ab7d1b2f8fcb444c916034a2dac4Affected
ca3cda6fcf1e922213a0cc58e708ffb999151db3 to before 1d8e020e51ab07e40f9dd00b52f1da7d96fec04cAffected
ca3cda6fcf1e922213a0cc58e708ffb999151db3 to before 3005091cd537ef8cdb7530dcb2ecfba8d2ef475cAffected
ca3cda6fcf1e922213a0cc58e708ffb999151db3 to before 2be373469be1774bbe03b0fa7e2854e65005b1ccAffected
ca3cda6fcf1e922213a0cc58e708ffb999151db3 to before de6946be9c8bc7d2279123433495af7c21011b99Affected
ca3cda6fcf1e922213a0cc58e708ffb999151db3 to before 928e399e84f4e80307dce44e89415115c473275bAffected
ca3cda6fcf1e922213a0cc58e708ffb999151db3 to before fb1adbd7e50f3d2de56d0a2bb0700e2e819a329eAffected

LinuxLinux

4.16Affected
before 4.16Not affected
4.19.322 through 4.19.*Not affected
5.4.284 through 5.4.*Not affected
5.10.226 through 5.10.*Not affected
5.15.167 through 5.15.*Not affected
6.1.110 through 6.1.*Not affected
6.6.51 through 6.6.*Not affected
6.10.10 through 6.10.*Not affected
6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.