CVE-2024-26770

Published: Apr 3, 2024Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: HID: nvidia-shield: Add missing null pointer checks to LED initialization devm_kasprintf() returns a pointer to dynamically allocated memory which can be NULL upon failure. Ensure the allocation was successful by checking the pointer validity. [jkosina@suse.com: tweak changelog a bit]

Affected (4)

Products: Linux: Linux Kernel

1 product

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Before 6.6.19
Linux Linux Kernel	From 6.7 to 6.7.7
Linux Linux Kernel	Version 6.8 rc1
Linux Linux Kernel	Version 6.8 rc2

Related CWEs

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

References (6)

https://git.kernel.org/stable/c/83527a13740f57b45f162e3af4c7db4b88521100

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/b6eda11c44dc89a681e1c105f0f4660e69b1e183

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/e71cc4a1e584293deafff1a7dea614b0210d0443

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/83527a13740f57b45f162e3af4c7db4b88521100

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://git.kernel.org/stable/c/b6eda11c44dc89a681e1c105f0f4660e69b1e183

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://git.kernel.org/stable/c/e71cc4a1e584293deafff1a7dea614b0210d0443

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

Timeline

No history available yet.