Executive Summary

Informations
Name CVE-2024-43824 First vendor Publication 2024-08-17
Vendor Cve Last vendor Modification 2024-09-03

Security-Database Scoring CVSS v3

Cvss vector : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Overall CVSS Score 5.5
Base Score 5.5 Environmental Score 5.5
impact SubScore 3.6 Temporal Score 5.5
Exploitabality Sub Score 1.8
 
Attack Vector Local Attack Complexity Low
Privileges Required Low User Interaction None
Scope Unchanged Confidentiality Impact None
Integrity Impact None Availability Impact High
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector :
Cvss Base Score N/A Attack Range N/A
Cvss Impact Score N/A Attack Complexity N/A
Cvss Expoit Score N/A Authentication N/A
Calculate full CVSS 2.0 Vectors scores

Detail

In the Linux kernel, the following vulnerability has been resolved:

PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()

Instead of getting the epc_features from pci_epc_get_features() API, use the cached pci_epf_test::epc_features value to avoid the NULL check. Since the NULL check is already performed in pci_epf_test_bind(), having one more check in pci_epf_test_core_init() is redundant and it is not possible to hit the NULL pointer dereference.

Also with commit a01e7214bef9 ("PCI: endpoint: Remove "core_init_notifier" flag"), 'epc_features' got dereferenced without the NULL check, leading to the following false positive Smatch warning:

drivers/pci/endpoint/functions/pci-epf-test.c:784 pci_epf_test_core_init() error: we previously assumed 'epc_features' could be null (see line 747)

Thus, remove the redundant NULL check and also use the epc_features:: {msix_capable/msi_capable} flags directly to avoid local variables.

[kwilczynski: commit log]

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43824

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-476 NULL Pointer Dereference

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 8
Os 3645

Sources (Detail)

https://git.kernel.org/stable/c/5a5095a8bd1bd349cce1c879e5e44407a34dda8a
https://git.kernel.org/stable/c/af4ad016abb1632ff7ee598a6037952b495e5b80
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
Date Informations
2025-01-08 03:04:31
  • Multiple Updates
2025-01-07 03:04:04
  • Multiple Updates
2024-12-25 03:02:42
  • Multiple Updates
2024-12-12 03:05:38
  • Multiple Updates
2024-11-23 03:02:40
  • Multiple Updates
2024-11-22 03:00:51
  • Multiple Updates
2024-11-20 02:59:11
  • Multiple Updates
2024-11-14 02:59:30
  • Multiple Updates
2024-11-09 02:59:30
  • Multiple Updates
2024-10-26 02:56:54
  • Multiple Updates
2024-10-25 02:58:48
  • Multiple Updates
2024-10-23 02:58:00
  • Multiple Updates
2024-10-03 02:53:17
  • Multiple Updates
2024-10-02 02:51:40
  • Multiple Updates
2024-09-15 02:49:20
  • Multiple Updates
2024-09-11 21:27:51
  • Multiple Updates
2024-09-06 21:28:12
  • Multiple Updates
2024-09-06 00:27:53
  • Multiple Updates
2024-09-03 21:27:46
  • Multiple Updates
2024-08-19 17:27:25
  • Multiple Updates
2024-08-17 17:27:28
  • First insertion