NetSight
IP …
high7.3

CVE-2024-49860

In the Linux kernel, the following vulnerability has been resolved: ACPI: sysfs: validate return type of _STR method Only buffer objects are valid return value…

Impact

In the Linux kernel, the following vulnerability has been resolved: ACPI: sysfs: validate return type of _STR method Only buffer objects are valid return values of _STR. If something else is returned description_show() will access invalid memory.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.7 before 5.10.227
from 5.11 before 5.15.168
from 5.16 before 6.1.113
from 6.2 before 6.6.54
from 6.7 before 6.10.13
from 6.11 before 6.11.2

Weakness classification

CWE-843

References