U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Vulnerability Change Records for CVE-2024-24862

Change History

CVE Translated by OpenAnolis 5/29/2024 3:15:09 AM

Action Type Old Value New Value
Removed Translation
Title: OpenAnolis
Description: En la función pci1xxxx_spi_probe, hay un posible puntero nulo que puede deberse a una asignación de memoria fallida por parte de la función devm_kzalloc. Por lo tanto, es necesario agregar una verificación de puntero nulo para evitar que se elimine la referencia al puntero nulo más adelante en el código. Para solucionar este problema, se debe marcar spi_bus->spi_int[iter]. La memoria asignada por devm_kzalloc se liberará automáticamente, por lo que simplemente devuelva -ENOMEM directamente sin preocuparse por pérdidas de memoria.

								
						

CVE Modified by OpenAnolis 5/29/2024 3:15:09 AM

Action Type Old Value New Value
Removed CVSS V3.1
OpenAnolis AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:N/A:H

								
						
Removed CWE
OpenAnolis CWE-476

								
						
Changed Description
In function pci1xxxx_spi_probe, there is a potential null pointer that
may be caused by a failed memory allocation by the function devm_kzalloc.
Hence, a null pointer check needs to be added to prevent null pointer
dereferencing later in the code.

To fix this issue, spi_bus->spi_int[iter] should be checked. The memory
allocated by devm_kzalloc will be automatically released, so just directly
return -ENOMEM without worrying about memory leaks.

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Removed Reference
OpenAnolis https://bugzilla.openanolis.cn/show_bug.cgi?id=8748

								
						

CVE Rejected by OpenAnolis 5/29/2024 3:15:09 AM

Action Type Old Value New Value