Lucene search
416baaa9-dc9f-4396-8d5f-8c081fb06d67NVD:CVE-2024-40973HistoryJul 12, 2024 - 1:15 p.m.
CVE-2024-40973
2024-07-1213:15:18
CWE-476
416baaa9-dc9f-4396-8d5f-8c081fb06d67
web.nvd.nist.gov
7
linux kernel
mtk-vcodec
null pointer deference
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS
0
Percentile
13.3%
In the Linux kernel, the following vulnerability has been resolved:
media: mtk-vcodec: potential null pointer deference in SCP
The return value of devm_kzalloc() needs to be checked to avoid
NULL pointer deference. This is similar to CVE-2022-3113.
Affected configurations
Node
linuxlinux_kernelRange<6.6.36
ORlinuxlinux_kernelRange6.7–6.9.7
| Vendor | Product | Version | CPE |
|---|---|---|---|
| linux | linux_kernel | * | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
Related
vulnrichment
vulnrichment
CVE-2024-40973 media: mtk-vcodec: potential null pointer deference in SCP
2024-07-12 12:32:10
cvelist
cvelist
CVE-2024-40973 media: mtk-vcodec: potential null pointer deference in SCP
2024-07-12 12:32:10
CVE-2022-3113
2022-12-14 00:00:00
debiancve
debiancve
CVE-2024-40973
2024-07-12 13:15:18
CVE-2022-3113
2022-12-14 21:15:12
osv
osv
CVE-2024-40973
2024-07-12 13:15:00
linux-nvidia, linux-nvidia-lowlatency vulnerabilities
2024-09-12 13:47:54
linux-azure vulnerabilities
2024-09-12 13:23:45
ubuntucve
ubuntucve
CVE-2024-40973
2024-07-12 00:00:00
CVE-2022-3113
2022-12-14 00:00:00
cve
cve
CVE-2024-40973
2024-07-12 13:15:18
CVE-2022-3113
2022-12-14 21:15:12
redhatcve
redhatcve
CVE-2024-40973
2024-07-16 17:55:54
CVE-2022-3113
2022-12-13 22:12:13
cbl_mariner
cbl_mariner
CVE-2022-3113 affecting package kernel 5.10.155.1-1
2022-12-27 17:56:16
CVE-2022-3113 affecting package kernel for versions less than 5.15.86.1-1
2023-01-17 16:47:16
nvd
nvd
CVE-2022-3113
2022-12-14 21:15:12
nessus
nessus
CBL Mariner 2.0 Security Update: kernel (CVE-2022-3113)
2023-03-20 00:00:00
SUSE SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2023:0147-1)
2023-01-26 00:00:00
SUSE SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2023:0146-1)
2023-01-26 00:00:00
prion
prion
Null pointer dereference
2022-12-14 21:15:00
packetstorm
packetstorm
Roxy-WI Remote Command Execution
2022-07-26 00:00:00
zdt
zdt
Roxy-WI Remote Command Execution Exploit
2022-07-26 00:00:00
metasploit
metasploit
Roxy-WI Prior to 6.1.1.0 Unauthenticated Command Injection RCE
2022-07-19 20:44:52
openvas
openvas
openSUSE: Security Advisory for the Linux Kernel (SUSE-SU-2023:0147-1)
2024-03-04 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:0146-1)
2023-01-27 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:0149-1)
2023-01-27 00:00:00
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS
0
Percentile
13.3%
Related for NVD:CVE-2024-40973