CVE-2024-50238

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: A vulnerability in the Linux kernel has been resolved, specifically in the phy: qcom: qmp-usbc driver. The issue was caused by a commit that removed the initialisation of the platform device driver data, despite it still being used in the runtime PM callbacks. This led to a NULL-pointer dereference on runtime suspend. The bug was reproduced when the driver was copied to create the qmp-usbc driver. The fix involves restoring the driver data initialisation at probe. It is noted that runtime PM is not commonly used and needs to be enabled manually through sysfs.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.