NetSight
IP …
medium5.5

CVE-2024-45028

In the Linux kernel, the following vulnerability has been resolved: mmc: mmc_test: Fix NULL dereference on allocation failure If the "test->highmem = alloc_pag…

Impact

In the Linux kernel, the following vulnerability has been resolved: mmc: mmc_test: Fix NULL dereference on allocation failure If the "test->highmem = alloc_pages()" allocation fails then calling __free_pages(test->highmem) will result in a NULL dereference. Also change the error code to -ENOMEM instead of returning success.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.27 before 4.19.321
from 4.20 before 5.4.283
from 5.5 before 5.10.225
from 5.11 before 5.15.166
from 5.16 before 6.1.107
from 6.2 before 6.6.48

Weakness classification

CWE-476

References