CVE-2024-47743

KEYS: prevent NULL pointer dereference in find_asymmetric_key()

published October 21, 2024

CVSS
—
EPSS
0%
Percentile
12.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

KEYS: prevent NULL pointer dereference in find_asymmetric_key()

In find_asymmetric_key(), if all NULLs are passed in the id_{0,1,2}

arguments, the kernel will first emit WARN but then have an oops

because id_2 gets dereferenced anyway.

Add the missing id_2 check and move WARN_ON() to the final else branch

to avoid duplicate NULL checks.

Found by Linux Verification Center (linuxtesting.org) with Svace static

analysis tool.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00222 · 12.1th percentile
Published
2024-10-21T12:14Z
EPSS history
Timeline
  • 21 OCT 12:14Z
    KEYS: prevent NULL pointer dereference in find_asymmetric_key()
    cvelistv5