← Volver a CVEs

CVE-2024-50069

MEDIUM

5.5

Descripcion

In the Linux kernel, the following vulnerability has been resolved: pinctrl: apple: check devm_kasprintf() returned value devm_kasprintf() can return a NULL pointer on failure but this returned value is not checked. Fix this lack and check the returned value. Found by code review.

Detalles CVE

Puntuacion CVSS v3.15.5

SeveridadMEDIUM

Vector CVSSCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Vector de ataqueLOCAL

ComplejidadLOW

Privilegios requeridosLOW

Interaccion usuarioNONE

Publicado10/29/2024

Ultima modificacion11/3/2025

Fuentenvd

Avistamientos honeypot0

Productos afectados

linux:linux_kernel

Debilidades (CWE)

CWE-476CWE-476

Referencias

https://git.kernel.org/stable/c/0a4d4dbef622ac8796a6665e0080da2685f9220a(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/4d2296fb7c80fdc9925d29a8e85d617cad08731a(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/665a58fe663ac7a9ea618dc0b29881649324b116(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/fad940e2dd789155f99ecafa71a7baf6f96530bc(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.