Riskcovery

CVE-2024-58011

platform/x86: int3472: Check for adev == NULL

State
Published
Severity
5.5 Medium
Published
Feb 27, 2025
Updated
Oct 15, 2026
Reserved
Feb 27, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

platform/x86: int3472: Check for adev == NULL

Not all devices have an ACPI companion fwnode, so adev might be NULL. This can e.g. (theoretically) happen when a user manually binds one of the int3472 drivers to another i2c/platform device through sysfs.

Add a check for adev not being set and return -ENODEV in that case to avoid a possible NULL pointer deref in skl_int3472_get_acpi_buffer().

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

Affected Products

ProductVersions
LinuxLinux
  • 5de691bffe57fd0fc2b4dcdcf13815c56d11db10 to before 46263a0b687a044e645387a9c7692ccd693f09f1Affected
  • 5de691bffe57fd0fc2b4dcdcf13815c56d11db10 to before 4f8b210823cc2d1f9d967f089a6c00d025bb237fAffected
  • 5de691bffe57fd0fc2b4dcdcf13815c56d11db10 to before f9c7cc44758f4930b41285a6d54afa8cbd9762b4Affected
  • 5de691bffe57fd0fc2b4dcdcf13815c56d11db10 to before 0a30353beca2693d30bde477024d755ffecea514Affected
  • 5de691bffe57fd0fc2b4dcdcf13815c56d11db10 to before a808ecf878ad646ebc9c83d9fc4ce72fd9c49d3dAffected
  • 5de691bffe57fd0fc2b4dcdcf13815c56d11db10 to before cd2fd6eab480dfc247b737cf7a3d6b009c4d0f1cAffected
LinuxLinux
  • 5.14Affected
  • before 5.14Not affected
  • 5.15.195 through 5.15.*Not affected
  • 6.1.129 through 6.1.*Not affected
  • 6.6.78 through 6.6.*Not affected
  • 6.12.14 through 6.12.*Not affected
  • 6.13.3 through 6.13.*Not affected
  • 6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.