CVE-2024-26978

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The issue is related to a NULL pointer dereference in the I2C instantiation of the max310x driver in the Linux kernel. When trying to instantiate a max14830 device from userspace using the command echo max14830 0x60 > /sys/bus/i2c/devices/i2c-2/new device, a kernel NULL pointer dereference error occurs. The error is caused by the max310x i2c probe function and can be prevented by adding a check for the validity of the devtype. The i2c device probe function is also involved in the call trace.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.