CVE-2024-24856CWE-476

NULL pointer deference in acpi_db_convert_to_package of Linux acpi module

Medium · published April 17, 2024

CVSS v3.1
5.3
EPSS
0%
Percentile
6.2
In the wild
Unconfirmed
What it is

The memory allocation function ACPI_ALLOCATE_ZEROED does not guarantee a

successful allocation, but the subsequent code directly dereferences the

pointer that receives it, which may lead to null pointer dereference.

To fix this issue, a null pointer check should be added. If it is null,

return exception code AE_NO_MEMORY.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00172 · 6.2th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2024-04-17T08:34Z
EPSS history
Timeline
  • 17 APR 08:34Z
    NULL pointer deference in acpi_db_convert_to_package of Linux acpi module
    cvelistv5