Riskcovery

CVE-2024-57985

firmware: qcom: scm: Cleanup global '__scm' on probe failures

State
Published
Severity
7.0 High
Published
Feb 27, 2025
Updated
Oct 15, 2026
Reserved
Feb 27, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

firmware: qcom: scm: Cleanup global '__scm' on probe failures

If SCM driver fails the probe, it should not leave global '__scm' variable assigned, because external users of this driver will assume the probe finished successfully. For example TZMEM parts ('__scm->mempool') are initialized later in the probe, but users of it (__scm_smc_call()) rely on the '__scm' variable.

This fixes theoretical NULL pointer exception, triggered via introducing probe deferral in SCM driver with call trace:

qcom_tzmem_alloc+0x70/0x1ac (P) qcom_tzmem_alloc+0x64/0x1ac (L) qcom_scm_assign_mem+0x78/0x194 qcom_rmtfs_mem_probe+0x2d4/0x38c platform_probe+0x68/0xc8

Scores

CVSSScoreVectorSource
3.17.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 40289e35ca525f29a03989352ab207b6a9675475 to before 390d3baeba51a126f75c97b90ec28b9384ce4b84Affected
  • 40289e35ca525f29a03989352ab207b6a9675475 to before faf1715798fe72b79e4432ce8c6d03ca69765425Affected
  • 40289e35ca525f29a03989352ab207b6a9675475 to before 1e76b546e6fca7eb568161f408133904ca6bcf4fAffected
LinuxLinux
  • 6.11Affected
  • before 6.11Not affected
  • 6.12.13 through 6.12.*Not affected
  • 6.13.2 through 6.13.*Not affected
  • 6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.