CVE-2024-43860

remoteproc: imx_rproc: Skip over memory region when node value is NULL

published August 17, 2024

CVSS
—
EPSS
0%
Percentile
12.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

remoteproc: imx_rproc: Skip over memory region when node value is NULL

In imx_rproc_addr_init() "nph = of_count_phandle_with_args()" just counts

number of phandles. But phandles may be empty. So of_parse_phandle() in

the parsing loop (0 < a < nph) may return NULL which is later dereferenced.

Adjust this issue by adding NULL-return check.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

[Fixed title to fit within the prescribed 70-75 charcters]

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00223 · 12.2th percentile
Published
2024-08-17T09:24Z
EPSS history
Timeline
  • 17 AUG 09:24Z
    remoteproc: imx_rproc: Skip over memory region when node value is NULL
    cvelistv5