NetSight
IP …
medium5.5

CVE-2024-38637

In the Linux kernel, the following vulnerability has been resolved: greybus: lights: check return of get_channel_from_mode If channel for the given node is not…

Impact

In the Linux kernel, the following vulnerability has been resolved: greybus: lights: check return of get_channel_from_mode If channel for the given node is not found we return null from get_channel_from_mode. Make sure we validate the return pointer before using it in two of the missing places. This was originally reported in [0]: Found by Linux Verification Center (linuxtesting.org) with SVACE. [0] https://lore.kernel.org/all/20240301190425.120605-1-m.lobanov@rosalinux.ru

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.9 before 4.19.316
from 4.20 before 5.4.278
from 5.5 before 5.10.219
from 5.11 before 5.15.161
from 5.16 before 6.1.93
from 6.2 before 6.6.33

Weakness classification

CWE-476

References