CVE-2024-49904

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-49904

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: add list empty check to avoid null pointer issue Add list empty check to avoid null pointer issues in some corner cases. - list_for_each_entry_safe()

References
Link Resource
https://git.kernel.org/stable/c/4416377ae1fdc41a90b665943152ccd7ff61d3c5 Patch
https://git.kernel.org/stable/c/5ec731ef47f1dba34daad3e51a93de793f9319ac Patch
https://git.kernel.org/stable/c/8e87763946f708063d7e5303339598abbb8c5aac Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

25 Oct 2024, 15:54

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/4416377ae1fdc41a90b665943152ccd7ff61d3c5 - () https://git.kernel.org/stable/c/4416377ae1fdc41a90b665943152ccd7ff61d3c5 - Patch
References () https://git.kernel.org/stable/c/5ec731ef47f1dba34daad3e51a93de793f9319ac - () https://git.kernel.org/stable/c/5ec731ef47f1dba34daad3e51a93de793f9319ac - Patch
References () https://git.kernel.org/stable/c/8e87763946f708063d7e5303339598abbb8c5aac - () https://git.kernel.org/stable/c/8e87763946f708063d7e5303339598abbb8c5aac - Patch
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux
Linux linux Kernel
CWE CWE-476

23 Oct 2024, 15:13

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/amdgpu: agregar comprobación de lista vacía para evitar problemas de puntero nulo Agrega comprobación de lista vacía para evitar problemas de puntero nulo en algunos casos especiales. - list_for_each_entry_safe()

21 Oct 2024, 18:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-10-21 18:15

Updated : 2024-10-25 15:54

NVD link : CVE-2024-49904

Mitre link : CVE-2024-49904

CVE.ORG link : CVE-2024-49904

JSON object : View

Products Affected

linux

CWE
CWE-476

NULL Pointer Dereference