References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

Known Affected Software Configurations Switch to CPE 2.2

Change History

NIST AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NIST CWE-476

OR
     *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.10 up to (excluding) 6.10.3

https://git.kernel.org/stable/c/3722873d49a1788d5420894d4f6f63e35f5c1f13 No Types Assigned

https://git.kernel.org/stable/c/3722873d49a1788d5420894d4f6f63e35f5c1f13 Patch

https://git.kernel.org/stable/c/fa6f16eff7320c91e908309e31be34cbbe4b7e58 No Types Assigned

https://git.kernel.org/stable/c/fa6f16eff7320c91e908309e31be34cbbe4b7e58 Patch

In the Linux kernel, the following vulnerability has been resolved:

ASoc: PCM6240: Return directly after a failed devm_kzalloc() in pcmdevice_i2c_probe()

The value “-ENOMEM” was assigned to the local variable “ret”
in one if branch after a devm_kzalloc() call failed at the beginning.
This error code will trigger then a pcmdevice_remove() call with a passed
null pointer so that an undesirable dereference will be performed.
Thus return the appropriate error code directly.

kernel.org https://git.kernel.org/stable/c/3722873d49a1788d5420894d4f6f63e35f5c1f13 [No types assigned]

kernel.org https://git.kernel.org/stable/c/fa6f16eff7320c91e908309e31be34cbbe4b7e58 [No types assigned]