PT-2024-11799
CVE-2022-48772
·
تاريخ النشر
2024-04-29
·
تاريخ التحديث
2025-09-29
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A null-pointer dereference issue has been resolved in the Linux kernel. The issue occurred because the driver did not check whether the client provided the platform data. Technical details about the issue include a null-pointer dereference in the kmemdup function, which is called by the lgdt3306a probe function. The vulnerability can be identified by a log message indicating a BUG: KASAN: null-ptr-deref in kmemdup+0x30/0x40.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾