CVE-2024-53204

phy: realtek: usb: fix NULL deref in rtk_usb3phy_probe

State: Published
Severity: Not scored
Published: Dec 27, 2024
Updated: May 11, 2026
Reserved: Nov 19, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

phy: realtek: usb: fix NULL deref in rtk_usb3phy_probe

In rtk_usb3phy_probe() devm_kzalloc() may return NULL but this returned value is not checked.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	adda6e82a7de7d6d478f6c8ef127f0ac51c510a1 to before e27877990e54bfe4246dd850f7ec8646c999ce58Affected adda6e82a7de7d6d478f6c8ef127f0ac51c510a1 to before 258ea41c926b7b3a16d0d7aa210a1401c4a1601bAffected b48415afe5fd7e6f5912d4c45720217b77d8e7ea to before 48d52d3168749e10c1c37cd4ceccd18625851741Affected b48415afe5fd7e6f5912d4c45720217b77d8e7ea to before 776f13ad1f88485206f1dca5ef138553106950e5Affected b48415afe5fd7e6f5912d4c45720217b77d8e7ea to before bf373d2919d98f3d1fe1b19a0304f72fe74386d9Affected
LinuxLinux	6.6Affected 6.9Affected before 6.6Not affected 6.6.4 through 6.6.Not affected 6.7 to before 6.9Not affected 6.11.11 through 6.11.Not affected 6.12.2 through 6.12.*Not affected 6.13 and laterNot affected

Product

Versions

LinuxLinux

adda6e82a7de7d6d478f6c8ef127f0ac51c510a1 to before e27877990e54bfe4246dd850f7ec8646c999ce58Affected
adda6e82a7de7d6d478f6c8ef127f0ac51c510a1 to before 258ea41c926b7b3a16d0d7aa210a1401c4a1601bAffected
b48415afe5fd7e6f5912d4c45720217b77d8e7ea to before 48d52d3168749e10c1c37cd4ceccd18625851741Affected
b48415afe5fd7e6f5912d4c45720217b77d8e7ea to before 776f13ad1f88485206f1dca5ef138553106950e5Affected
b48415afe5fd7e6f5912d4c45720217b77d8e7ea to before bf373d2919d98f3d1fe1b19a0304f72fe74386d9Affected

LinuxLinux

6.6Affected
6.9Affected
before 6.6Not affected
6.6.4 through 6.6.*Not affected
6.7 to before 6.9Not affected
6.11.11 through 6.11.*Not affected
6.12.2 through 6.12.*Not affected
6.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.