CVEvulnerability

CVE-2024-46739

5.5 MEDIUM Published 2024-09-18 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2024-09-18
Last modified
2026-06-17
Assigner
416baaa9-dc9f-4396-8d5f-8c081fb06d67
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind For primary VM Bus channels, primary_channel pointer is always NULL. This pointer is valid only for the secondary channels. Also, rescind callback is meant for primary channels only. Fix NULL pointer dereference by retrieving the device_obj from the parent for the primary channel.

Affected configurations

• linux linux kernel (>= 4.16 < 4.19.322) • linux linux kernel (>= 4.20 < 5.4.284) • linux linux kernel (>= 5.5 < 5.10.226) • linux linux kernel (>= 5.11 < 5.15.167) • linux linux kernel (>= 5.16 < 6.1.110) • linux linux kernel (>= 6.2 < 6.6.51) • linux linux kernel (>= 6.7 < 6.10.10) • linux linux kernel 6.11

Related

Weakness · CWE (1)

  • CWE-476 NULL Pointer Dereference weakness

References