NetSight
IP …
medium5.5

CVE-2024-56767

In the Linux kernel, the following vulnerability has been resolved: dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset The at_xdmac_memset_c…

Impact

In the Linux kernel, the following vulnerability has been resolved: dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset The at_xdmac_memset_create_desc may return NULL, which will lead to a null pointer dereference. For example, the len input is error, or the atchan->free_descs_list is empty and memory is exhausted. Therefore, add check to avoid this.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.2 before 6.1.123
from 6.2 before 6.6.69
from 6.7 before 6.12.8
Version 6.13

Weakness classification

CWE-476

References