CVE-2024-47756

PCI: keystone: Fix if-statement expression in ks_pcie_quirk()

State
Published
Severity
Not scored
Published
Oct 21, 2024
Updated
May 23, 2026
Reserved
Sep 30, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

PCI: keystone: Fix if-statement expression in ks_pcie_quirk()

This code accidentally uses && where || was intended. It potentially results in a NULL dereference.

Thus, fix the if-statement expression to use the correct condition.

[kwilczynski: commit log]

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • cfb006e185f64edbbdf7869eac352442bc76b8f6 to before 9c9afc3e75069fcfb067727973242cfbf00dd7ebAffected
  • ebbdbbc580c1695dec283d0ba6448729dc993246 to before c289903b7a216df5ea6e1850ddf1b958eea9921dAffected
  • 135843c351c08df72bdd4b4ebea53c8052a76881 to before dc5aeba07395c8dfa29bb878c8ce4d5180427221Affected
  • af218c803fe298ddf00abef331aa526b20d7ea61 to before 23838bef2adb714ec37b2d6141dccf4a3a70bdefAffected
  • 576d0fb6f8d4bd4695e70eee173a1b9c7bae9572 to before e85ab507882db165c10a858d7f685a0a38f0312eAffected
  • dd47051c76c8acd8cb983f01b4d1265da29cb66a to before 72210e52e19a27f615e0b5273d2bf012d0dc318dAffected
  • 86f271f22bbb6391410a07e08d6ca3757fda01fa to before 2171c5cb2fbc3e03af7e8116cd58736c09328655Affected
  • 86f271f22bbb6391410a07e08d6ca3757fda01fa to before 6188a1c762eb9bbd444f47696eda77a5eae6207aAffected
  • 5.4.284 to before 5.4.285Affected
  • 5.10.226 to before 5.10.227Affected
  • 5.15.167 to before 5.15.168Affected
  • 6.1.110 to before 6.1.113Affected
  • 6.6.51 to before 6.6.54Affected
  • 6.10.10 to before 6.10.13Affected
LinuxLinux
  • 6.11Affected
  • before 6.11Not affected
  • 5.4.285 through 5.4.*Not affected
  • 5.10.227 through 5.10.*Not affected
  • 5.15.168 through 5.15.*Not affected
  • 6.1.113 through 6.1.*Not affected
  • 6.6.54 through 6.6.*Not affected
  • 6.10.13 through 6.10.*Not affected
  • 6.11.2 through 6.11.*Not affected
  • 6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.