CVE-2024-53205

phy: realtek: usb: fix NULL deref in rtk_usb2phy_probe

published December 27, 2024

CVSS
—
EPSS
0%
Percentile
18.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

phy: realtek: usb: fix NULL deref in rtk_usb2phy_probe

In rtk_usb2phy_probe() devm_kzalloc() may return NULL

but this returned value is not checked.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00274 · 18.7th percentile
Published
2024-12-27T13:49Z
EPSS history
Timeline
  • 27 DEC 13:49Z
    phy: realtek: usb: fix NULL deref in rtk_usb2phy_probe
    cvelistv5