Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-43860
HistoryAug 17, 2024 - 9:24 a.m.

CVE-2024-43860 remoteproc: imx_rproc: Skip over memory region when node value is NULL

2024-08-1709:24:29
Linux
github.com
1
linux kernel
vulnerability
remoteproc
imx_rproc
memory region
null
of_count_phandle_with_args
of_parse_phandle

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

remoteproc: imx_rproc: Skip over memory region when node value is NULL

In imx_rproc_addr_init() “nph = of_count_phandle_with_args()” just counts
number of phandles. But phandles may be empty. So of_parse_phandle() in
the parsing loop (0 < a < nph) may return NULL which is later dereferenced.
Adjust this issue by adding NULL-return check.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

[Fixed title to fit within the prescribed 70-75 charcters]

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial