CVE-2024-53205

phy: realtek: usb: fix NULL deref in rtk_usb2phy_probe

State: Published
Severity: Not scored
Published: Dec 27, 2024
Updated: May 11, 2026
Reserved: Nov 19, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

phy: realtek: usb: fix NULL deref in rtk_usb2phy_probe

In rtk_usb2phy_probe() devm_kzalloc() may return NULL but this returned value is not checked.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	134e6d25f6bd06071e5aac0a7eefcea6f7713955 to before 7e2cde1813418b39b5e95d86e10d6701dccf18afAffected 134e6d25f6bd06071e5aac0a7eefcea6f7713955 to before 7a784bcdd7e54f0599da3b2360e472238412623eAffected eeda494542e55b603c7b80e14bfc5ee4ab7f9814 to before 0b398b6b6c94315fd2ce3658e3cee96539dbd7b7Affected eeda494542e55b603c7b80e14bfc5ee4ab7f9814 to before fb83c9a08324e37f321ffb400809aa4310387d65Affected eeda494542e55b603c7b80e14bfc5ee4ab7f9814 to before 04e3e9188291a183b27306ddb833722c0d083d6aAffected
LinuxLinux	6.6Affected 6.9Affected before 6.6Not affected 6.6.4 through 6.6.Not affected 6.7 to before 6.9Not affected 6.11.11 through 6.11.Not affected 6.12.2 through 6.12.*Not affected 6.13 and laterNot affected

Product

Versions

LinuxLinux

134e6d25f6bd06071e5aac0a7eefcea6f7713955 to before 7e2cde1813418b39b5e95d86e10d6701dccf18afAffected
134e6d25f6bd06071e5aac0a7eefcea6f7713955 to before 7a784bcdd7e54f0599da3b2360e472238412623eAffected
eeda494542e55b603c7b80e14bfc5ee4ab7f9814 to before 0b398b6b6c94315fd2ce3658e3cee96539dbd7b7Affected
eeda494542e55b603c7b80e14bfc5ee4ab7f9814 to before fb83c9a08324e37f321ffb400809aa4310387d65Affected
eeda494542e55b603c7b80e14bfc5ee4ab7f9814 to before 04e3e9188291a183b27306ddb833722c0d083d6aAffected

LinuxLinux

6.6Affected
6.9Affected
before 6.6Not affected
6.6.4 through 6.6.*Not affected
6.7 to before 6.9Not affected
6.11.11 through 6.11.*Not affected
6.12.2 through 6.12.*Not affected
6.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.