Vulnerability Details CVE-2024-57978
In the Linux kernel, the following vulnerability has been resolved:
media: imx-jpeg: Fix potential error pointer dereference in detach_pm()
The proble is on the first line:
if (jpeg->pd_dev[i] && !pm_runtime_suspended(jpeg->pd_dev[i]))
If jpeg->pd_dev[i] is an error pointer, then passing it to
pm_runtime_suspended() will lead to an Oops. The other conditions
check for both error pointers and NULL, but it would be more clear to
use the IS_ERR_OR_NULL() check for that.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 12.0%
CVSS Severity
CVSS v3 Score 5.5
References
- https://git.kernel.org/stable/c/1378ffec30367233152b7dbf4fa6a25ee98585d1
- https://git.kernel.org/stable/c/1b2af918bb714937a8be6cb637f528585461cd98
- https://git.kernel.org/stable/c/6e601a64f7777e2f78c02db1a8b5ba3b7c5e9e31
- https://git.kernel.org/stable/c/a32ba399a030853f2db45a90ba5474fdd3494aad
- https://git.kernel.org/stable/c/f0b8535a7885ed4fd0b11625addb5476cae0f845
- https://git.kernel.org/stable/c/fde89fe11b44500bfcb2d405825b69a5df805d19
Products affected by CVE-2024-57978
-
cpe:2.3:o:linux:linux_kernel:5.15.174
-
cpe:2.3:o:linux:linux_kernel:5.15.175
-
cpe:2.3:o:linux:linux_kernel:5.15.176
-
cpe:2.3:o:linux:linux_kernel:5.15.177
-
cpe:2.3:o:linux:linux_kernel:5.15.178
-
cpe:2.3:o:linux:linux_kernel:5.15.179
-
cpe:2.3:o:linux:linux_kernel:5.15.180
-
cpe:2.3:o:linux:linux_kernel:6.1.120
-
cpe:2.3:o:linux:linux_kernel:6.1.121
-
cpe:2.3:o:linux:linux_kernel:6.1.122
-
cpe:2.3:o:linux:linux_kernel:6.1.123
-
cpe:2.3:o:linux:linux_kernel:6.1.124
-
cpe:2.3:o:linux:linux_kernel:6.1.125
-
cpe:2.3:o:linux:linux_kernel:6.1.126
-
cpe:2.3:o:linux:linux_kernel:6.1.127
-
cpe:2.3:o:linux:linux_kernel:6.1.128
-
cpe:2.3:o:linux:linux_kernel:6.12.10
-
cpe:2.3:o:linux:linux_kernel:6.12.11
-
cpe:2.3:o:linux:linux_kernel:6.12.12
-
cpe:2.3:o:linux:linux_kernel:6.12.4
-
cpe:2.3:o:linux:linux_kernel:6.12.5
-
cpe:2.3:o:linux:linux_kernel:6.12.6
-
cpe:2.3:o:linux:linux_kernel:6.12.7
-
cpe:2.3:o:linux:linux_kernel:6.12.8
-
cpe:2.3:o:linux:linux_kernel:6.12.9
-
cpe:2.3:o:linux:linux_kernel:6.13
-
cpe:2.3:o:linux:linux_kernel:6.13.1
-
cpe:2.3:o:linux:linux_kernel:6.6.64
-
cpe:2.3:o:linux:linux_kernel:6.6.65
-
cpe:2.3:o:linux:linux_kernel:6.6.66
-
cpe:2.3:o:linux:linux_kernel:6.6.67
-
cpe:2.3:o:linux:linux_kernel:6.6.68
-
cpe:2.3:o:linux:linux_kernel:6.6.69
-
cpe:2.3:o:linux:linux_kernel:6.6.70
-
cpe:2.3:o:linux:linux_kernel:6.6.71
-
cpe:2.3:o:linux:linux_kernel:6.6.72
-
cpe:2.3:o:linux:linux_kernel:6.6.73
-
cpe:2.3:o:linux:linux_kernel:6.6.74
-
cpe:2.3:o:linux:linux_kernel:6.6.75