Bug 2327334 (CVE-2024-53069) - CVE-2024-53069 kernel: firmware: qcom: scm: fix a NULL-pointer dereference
Summary: CVE-2024-53069 kernel: firmware: qcom: scm: fix a NULL-pointer dereference
Keywords:
Status: NEW
Alias: CVE-2024-53069
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On: 2327488
Blocks:
TreeView+ depends on / blocked
 
Reported: 2024-11-19 18:01 UTC by OSIDB Bzimport
Modified: 2024-11-21 19:06 UTC (History)
4 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2024-11-19 18:01:29 UTC 
In the Linux kernel, the following vulnerability has been resolved:

firmware: qcom: scm: fix a NULL-pointer dereference

Some SCM calls can be invoked with __scm being NULL (the driver may not
have been and will not be probed as there's no SCM entry in device-tree).
Make sure we don't dereference a NULL pointer.
Comment 1 Robb Gatica 2024-11-19 21:29:50 UTC 
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024111933-CVE-2024-53069-2786@gregkh/T
Note You need to log in before you can comment on or make changes to this bug.