CVE-2024-43822

ASoc: PCM6240: Return directly after a failed devm_kzalloc() in pcmdevice_i2c_probe()

published August 17, 2024

CVSS
—
EPSS
0%
Percentile
8.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ASoc: PCM6240: Return directly after a failed devm_kzalloc() in pcmdevice_i2c_probe()

The value “-ENOMEM” was assigned to the local variable “ret”

in one if branch after a devm_kzalloc() call failed at the beginning.

This error code will trigger then a pcmdevice_remove() call with a passed

null pointer so that an undesirable dereference will be performed.

Thus return the appropriate error code directly.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00193 · 8.5th percentile
Published
2024-08-17T09:21Z
EPSS history
Timeline
  • 17 AUG 09:21Z
    ASoc: PCM6240: Return directly after a failed devm_kzalloc() in pcmdevice_i2c_probe()
    cvelistv5