NetSight
IP …
medium5.5

CVE-2024-26978

In the Linux kernel, the following vulnerability has been resolved: serial: max310x: fix NULL pointer dereference in I2C instantiation When trying to instantia…

Impact

In the Linux kernel, the following vulnerability has been resolved: serial: max310x: fix NULL pointer dereference in I2C instantiation When trying to instantiate a max14830 device from userspace: echo max14830 0x60 > /sys/bus/i2c/devices/i2c-2/new_device we get the following error: Unable to handle kernel NULL pointer dereference at virtual address... ... Call trace: max310x_i2c_probe+0x48/0x170 [max310x] i2c_device_probe+0x150/0x2a0 ... Add check for validity of devtype to prevent the error, and abort probe with a meaningful error message.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 5.4.274
from 5.5 before 5.10.215
from 5.11 before 6.1.84
from 6.2 before 6.6.24
from 6.7 before 6.7.12
from 6.8 through 6.8.3

Weakness classification

CWE-476

References