Riskcovery

CVE-2024-57852

firmware: qcom: scm: smc: Handle missing SCM device

State
Published
Severity
Not scored
Published
Feb 27, 2025
Updated
May 23, 2026
Reserved
Feb 27, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

firmware: qcom: scm: smc: Handle missing SCM device

Commit ca61d6836e6f ("firmware: qcom: scm: fix a NULL-pointer dereference") makes it explicit that qcom_scm_get_tzmem_pool() can return NULL, therefore its users should handle this.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • ca61d6836e6f4442a77762e1074d2706a2a6e578 to before cd955b75849b58b650ca3f87b83bd78cde1da8bcAffected
  • ca61d6836e6f4442a77762e1074d2706a2a6e578 to before 57a811c0886f3f3677bb4619502b35b5bb917f2eAffected
  • ca61d6836e6f4442a77762e1074d2706a2a6e578 to before 94f48ecf0a538019ca2025e0b0da391f8e7cc58cAffected
  • 3d36e2b1d803f0d1cc674115d295a8f20ddb9268Affected
  • 6.11.8 to before 6.12Affected
LinuxLinux
  • 6.12Affected
  • before 6.12Not affected
  • 6.12.16 through 6.12.*Not affected
  • 6.13.4 through 6.13.*Not affected
  • 6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.