CVE-2024-35977

A race condition vulnerability was found in the Linux kernel's crosecuart driver. This issue occurs because the crosecuartprobe function calls devmserdevdeviceopen before initializing the serdev-ops via serdevdevicesetclientops. This mismatch can cause a NULL pointer dereference when accessing...

CVE-2024-35977 platform/chrome: cros_ec_uart: properly fix race condition

In the Linux kernel, the following vulnerability has been resolved: platform/chrome: crosecuart: properly fix race condition The crosecuartprobe function calls devmserdevdeviceopen before it calls serdevdevicesetclientops. This can trigger a NULL pointer dereference: BUG: kernel NULL pointer...

CVE-2024-35977

CVE-2024-35977 : In the Linux kernel, a race in cros_ec_uart caused a NULL pointer dereference in serdev handling when devm_serdev_device_open() was called before serdev->ops were set. The crash path involves the code path that dereferences serdev->ops->receive_buf if serdev is present b...

CVE-2024-35977 platform/chrome: cros_ec_uart: properly fix race condition

In the Linux kernel, the following vulnerability has been resolved: platform/chrome: crosecuart: properly fix race condition The crosecuartprobe function calls devmserdevdeviceopen before it calls serdevdevicesetclientops. This can trigger a NULL pointer dereference: BUG: kernel NULL pointer...

CVE-2024-35977: Concurrent Execution using Shared Resource with Improper Synchronization

In the Linux kernel, the following vulnerability has been resolved: platform/chrome: crosecuart: properly fix race condition The crosecuartprobe function calls devmserdevdeviceopen before it calls serdevdevicesetclientops. This can trigger a NULL pointer dereference: BUG: kernel NULL pointer...

PT-2024-41622

Уязвимость функции cros ec uart probe модуля drivers/platform/chrome/cros ec uart.c поддержки платформы оборудования Chrome OS ядра операционной системы Linux связана с ошибками синхронизации при использовании общего ресурса. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в...

PT-2025-43080

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory corruption issue exists in the platform/chrome component due to an insufficient check on the size of s mem.bytes relative to the buffer size during an ioctl operation. This can...

chromium-browser: use after free in blink

A use after free in Blink in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...