NetSight
IP …
medium5.5

CVE-2024-35984

In the Linux kernel, the following vulnerability has been resolved: i2c: smbus: fix NULL function pointer dereference Baruch reported an OOPS when using the de…

Impact

In the Linux kernel, the following vulnerability has been resolved: i2c: smbus: fix NULL function pointer dereference Baruch reported an OOPS when using the designware controller as target only. Target-only modes break the assumption of one transfer function always being available. Fix this by always checking the pointer in __i2c_transfer. [wsa: dropped the simplification in core-smbus to avoid theoretical regressions]

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.19 before 4.19.313
from 4.20 before 5.4.275
from 5.5 before 5.10.216
from 5.11 before 5.15.158
from 5.16 before 6.1.90
from 6.2 before 6.6.30

Weakness classification

CWE-476

References