Riskcovery

CVE-2024-50070

pinctrl: stm32: check devm_kasprintf() returned value

State
Published
Severity
Not scored
Published
Oct 29, 2024
Updated
May 11, 2026
Reserved
Oct 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

pinctrl: stm32: check devm_kasprintf() returned value

devm_kasprintf() can return a NULL pointer on failure but this returned value is not checked. Fix this lack and check the returned value.

Found by code review.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 75285cb2b49a9bfe15fc22aecab45ef25d50e6f2 to before a8d52de0a6c6b091b2771bcb98ce408cf9d69fe3Affected
  • 32c170ff15b044579b1f8b8cdabf543406dde9da to before 3b36bb1fca2b87f6292ca2a8593f297c5e9fab41Affected
  • 32c170ff15b044579b1f8b8cdabf543406dde9da to before 1f266957ae1207b0717c2d69096bc70654ae9fcbAffected
  • 32c170ff15b044579b1f8b8cdabf543406dde9da to before b0f0e3f0552a566def55c844b0d44250c58e4df6Affected
LinuxLinux
  • 6.6Affected
  • before 6.6Not affected
  • 6.6.58 through 6.6.*Not affected
  • 6.11.5 through 6.11.*Not affected
  • 6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.