CVE-2024-49871

Input: adp5589-keys - fix NULL pointer dereference

published October 21, 2024

CVSS
—
EPSS
0%
Percentile
13.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

Input: adp5589-keys - fix NULL pointer dereference

We register a devm action to call adp5589_clear_config() and then pass

the i2c client as argument so that we can call i2c_get_clientdata() in

order to get our device object. However, i2c_set_clientdata() is only

being set at the end of the probe function which means that we'll get a

NULL pointer dereference in case the probe function fails early.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00236 · 13.7th percentile
Published
2024-10-21T18:01Z
EPSS history
Timeline
  • 21 OCT 18:01Z
    Input: adp5589-keys - fix NULL pointer dereference
    cvelistv5