Lucene search

K
cvelistAnolisCVELIST:CVE-2024-24856
HistoryApr 17, 2024 - 8:34 a.m.

CVE-2024-24856 NULL pointer deference in acpi_db_convert_to_package of Linux acpi module

2024-04-1708:34:59
CWE-476
Anolis
raw.githubusercontent.com
2
cve-2024-24856
acpi
memory allocation
null pointer
exception code

5.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.7%

The memory allocation function ACPI_ALLOCATE_ZEROED does not guarantee a
successful allocation, but the subsequent code directly dereferences the
pointer that receives it, which may lead to null pointer dereference.

To fix this issue, a null pointer check should be added. If it is null,
return exception code AE_NO_MEMORY.

5.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.7%

Related for CVELIST:CVE-2024-24856