CVE-2024-42278

Summary

In the Linux kernel, the following vulnerability has been resolved:

ASoC: TAS2781: Fix tasdev_load_calibrated_data()

This function has a reversed if statement so it's either a no-op or it leads to a NULL dereference.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux57847c2ec5fb5e951fe9028f9e587e3e878d9129 < 6d98741dbd1309a6f2d7cffbb10a8f036ec3ca06affected
LinuxLinuxb195acf5266d2dee4067f89345c3e6b88d925311 < 51be301d29d674ff328dfcf23705851f326f35b3affected
LinuxLinuxb195acf5266d2dee4067f89345c3e6b88d925311 < 92c78222168e9035a9bfb8841c2e56ce23e51f73affected
LinuxLinuxddcf2bb619e3955f0e372d4bd8558758fd56303faffected
LinuxLinux6.6.33 < 6.6.44affected
LinuxLinux6.9.4 < 6.10affected
LinuxLinux6.10affected
LinuxLinux0 < 6.10unaffected
LinuxLinux6.6.44 <= 6.6.*unaffected
LinuxLinux6.10.3 <= 6.10.*unaffected
LinuxLinux6.11 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References