CVE-2024-49871

Input: adp5589-keys - fix NULL pointer dereference

State: Published
Severity: Not scored
Published: Oct 21, 2024
Updated: May 11, 2026
Reserved: Oct 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

Input: adp5589-keys - fix NULL pointer dereference

We register a devm action to call adp5589_clear_config() and then pass the i2c client as argument so that we can call i2c_get_clientdata() in order to get our device object. However, i2c_set_clientdata() is only being set at the end of the probe function which means that we'll get a NULL pointer dereference in case the probe function fails early.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	30df385e35a48f773b85117fc490152c2395e45b to before 4449fedb8a710043fc0925409eba844c192d4337Affected 30df385e35a48f773b85117fc490152c2395e45b to before 34e304cc53ae5d3c8e3f08b41dd11e0d4f3e01edAffected 30df385e35a48f773b85117fc490152c2395e45b to before 7c3f04223aaf82489472d614c6decee5a1ce8d7fAffected 30df385e35a48f773b85117fc490152c2395e45b to before 9a38791ee79bd17d225c15a6d1479448be127a59Affected 30df385e35a48f773b85117fc490152c2395e45b to before 122b160561f6429701a0559a0f39b0ae309488c6Affected 30df385e35a48f773b85117fc490152c2395e45b to before fb5cc65f973661241e4a2b7390b429aa7b330c69Affected
LinuxLinux	5.11Affected before 5.11Not affected 5.15.168 through 5.15.Not affected 6.1.113 through 6.1.Not affected 6.6.55 through 6.6.Not affected 6.10.14 through 6.10.Not affected 6.11.3 through 6.11.*Not affected 6.12 and laterNot affected

Product

Versions

LinuxLinux

30df385e35a48f773b85117fc490152c2395e45b to before 4449fedb8a710043fc0925409eba844c192d4337Affected
30df385e35a48f773b85117fc490152c2395e45b to before 34e304cc53ae5d3c8e3f08b41dd11e0d4f3e01edAffected
30df385e35a48f773b85117fc490152c2395e45b to before 7c3f04223aaf82489472d614c6decee5a1ce8d7fAffected
30df385e35a48f773b85117fc490152c2395e45b to before 9a38791ee79bd17d225c15a6d1479448be127a59Affected
30df385e35a48f773b85117fc490152c2395e45b to before 122b160561f6429701a0559a0f39b0ae309488c6Affected
30df385e35a48f773b85117fc490152c2395e45b to before fb5cc65f973661241e4a2b7390b429aa7b330c69Affected

LinuxLinux

5.11Affected
before 5.11Not affected
5.15.168 through 5.15.*Not affected
6.1.113 through 6.1.*Not affected
6.6.55 through 6.6.*Not affected
6.10.14 through 6.10.*Not affected
6.11.3 through 6.11.*Not affected
6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.