CVE-2024-45002

CVE-2024-45002 is a Linux kernel vulnerability affecting rtla/osnoise: a NULL dereference in error handling when tool->data allocation fails. The issue is confirmed in multiple vendor advisories (Azure Linux Nessus, Astra Linux bulletin, Debian DLA-4008) and is tied to kernel code paths involv...

CVE-2024-45002 rtla/osnoise: Prevent NULL dereference in error handling

In the Linux kernel, the following vulnerability has been resolved: rtla/osnoise: Prevent NULL dereference in error handling If the "tool-data" allocation fails then there is no need to call osnoisefreetop and, in fact, doing so will lead to a NULL dereference...