U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

National Vulnerability Database

National Vulnerability Database

NVD

National Vulnerability Database
  1. Vulnerabilities

CVE-2024-27412 Detail

Description

In the Linux kernel, the following vulnerability has been resolved: power: supply: bq27xxx-i2c: Do not free non existing IRQ The bq27xxx i2c-client may not have an IRQ, in which case client->irq will be 0. bq27xxx_battery_i2c_probe() already has an if (client->irq) check wrapping the request_threaded_irq(). But bq27xxx_battery_i2c_remove() unconditionally calls free_irq(client->irq) leading to: [ 190.310742] ------------[ cut here ]------------ [ 190.310843] Trying to free already-free IRQ 0 [ 190.310861] WARNING: CPU: 2 PID: 1304 at kernel/irq/manage.c:1893 free_irq+0x1b8/0x310 Followed by a backtrace when unbinding the driver. Add an if (client->irq) to bq27xxx_battery_i2c_remove() mirroring probe() to fix this.


Metrics

 
NVD enrichment efforts reference publicly available information to associate vector strings. CVSS information contributed by other sources is also displayed.
CVSS 4.0 Severity and Vector Strings:

NIST CVSS score
NIST: NVD
N/A
NVD assessment not yet provided.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to [email protected].

URL Source(s) Tag(s)
https://git.kernel.org/stable/c/083686474e7c97b0f8b66df37fcb64e432e8b771 CVE, kernel.org
https://git.kernel.org/stable/c/2df70149e73e79783bcbc7db4fa51ecef0e2022c CVE, kernel.org
https://git.kernel.org/stable/c/7394abc8926adee6a817bab10797e0adc898af77 CVE, kernel.org
https://git.kernel.org/stable/c/cefe18e9ec84f8fe3e198ccebb815cc996eb9797 CVE, kernel.org
https://git.kernel.org/stable/c/d4d813c0a14d6bf52d810a55db06a2e7e3d98eaa CVE, kernel.org
https://git.kernel.org/stable/c/d7acc4a569f5f4513120c85ea2b9f04909b7490f CVE, kernel.org
https://git.kernel.org/stable/c/e601ae81910ce6a3797876e190a2d8ef6cf828bc CVE, kernel.org
https://git.kernel.org/stable/c/fbca8bae1ba79d443a58781b45e92a73a24ac8f8 CVE, kernel.org
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html CVE
https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html CVE

Weakness Enumeration

CWE-ID CWE Name Source

Change History

7 change records found show changes

Quick Info

CVE Dictionary Entry:
CVE-2024-27412
NVD Published Date:
05/17/2024
NVD Last Modified:
11/21/2024
Source:
kernel.org