CVE-2024-49962

ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package()

State: Published
Severity: Not scored
Published: Oct 21, 2024
Updated: May 11, 2026
Reserved: Oct 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package()

ACPICA commit 4d4547cf13cca820ff7e0f859ba83e1a610b9fd0

ACPI_ALLOCATE_ZEROED() may fail, elements might be NULL and will cause NULL pointer dereference later.

[ rjw: Subject and changelog edits ]

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	9957510255724c1c746c9a6264c849e9fdd4cd24 to before 4669da66ebc5b09881487f30669b0fcdb462188eAffected 9957510255724c1c746c9a6264c849e9fdd4cd24 to before 402b4c6b7500c7cca6972d2456a4a422801035b5Affected 9957510255724c1c746c9a6264c849e9fdd4cd24 to before cbb67e245dacd02b5e1d82733892647df1523982Affected 9957510255724c1c746c9a6264c849e9fdd4cd24 to before 1c9b8775062f8d854a80caf186af57fc617d454cAffected 9957510255724c1c746c9a6264c849e9fdd4cd24 to before f282db38953ad71dd4f3f8877a4e1d37e580e30aAffected 9957510255724c1c746c9a6264c849e9fdd4cd24 to before 4588ea78d3904bebb613b0bb025669e75800f546Affected 9957510255724c1c746c9a6264c849e9fdd4cd24 to before a907c113a8b66972f15f084d7dff960207b1f71dAffected 9957510255724c1c746c9a6264c849e9fdd4cd24 to before ae5d4c7e76ba393d20366dfea1f39f24560ffb1dAffected 9957510255724c1c746c9a6264c849e9fdd4cd24 to before a5242874488eba2b9062985bf13743c029821330Affected
LinuxLinux	4.4Affected before 4.4Not affected 4.19.323 through 4.19.Not affected 5.4.285 through 5.4.Not affected 5.10.227 through 5.10.Not affected 5.15.168 through 5.15.Not affected 6.1.113 through 6.1.Not affected 6.6.55 through 6.6.Not affected 6.10.14 through 6.10.Not affected 6.11.3 through 6.11.Not affected 6.12 and laterNot affected

Product

Versions

LinuxLinux

9957510255724c1c746c9a6264c849e9fdd4cd24 to before 4669da66ebc5b09881487f30669b0fcdb462188eAffected
9957510255724c1c746c9a6264c849e9fdd4cd24 to before 402b4c6b7500c7cca6972d2456a4a422801035b5Affected
9957510255724c1c746c9a6264c849e9fdd4cd24 to before cbb67e245dacd02b5e1d82733892647df1523982Affected
9957510255724c1c746c9a6264c849e9fdd4cd24 to before 1c9b8775062f8d854a80caf186af57fc617d454cAffected
9957510255724c1c746c9a6264c849e9fdd4cd24 to before f282db38953ad71dd4f3f8877a4e1d37e580e30aAffected
9957510255724c1c746c9a6264c849e9fdd4cd24 to before 4588ea78d3904bebb613b0bb025669e75800f546Affected
9957510255724c1c746c9a6264c849e9fdd4cd24 to before a907c113a8b66972f15f084d7dff960207b1f71dAffected
9957510255724c1c746c9a6264c849e9fdd4cd24 to before ae5d4c7e76ba393d20366dfea1f39f24560ffb1dAffected
9957510255724c1c746c9a6264c849e9fdd4cd24 to before a5242874488eba2b9062985bf13743c029821330Affected

LinuxLinux

4.4Affected
before 4.4Not affected
4.19.323 through 4.19.*Not affected
5.4.285 through 5.4.*Not affected
5.10.227 through 5.10.*Not affected
5.15.168 through 5.15.*Not affected
6.1.113 through 6.1.*Not affected
6.6.55 through 6.6.*Not affected
6.10.14 through 6.10.*Not affected
6.11.3 through 6.11.*Not affected
6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.