CVE-2024-45028

Summary

In the Linux kernel, the following vulnerability has been resolved:

mmc: mmc_test: Fix NULL dereference on allocation failure

If the "test->highmem = alloc_pages()" allocation fails then calling __free_pages(test->highmem) will result in a NULL dereference. Also change the error code to -ENOMEM instead of returning success.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux2661081f5ab9cb25359d27f88707a018cf4e68e9 < e97be13a9f51284da450dd2a592e3fa87b49cdc9affected
LinuxLinux2661081f5ab9cb25359d27f88707a018cf4e68e9 < 2b507b03991f44dfb202fc2a82c9874d1b1f0c06affected
LinuxLinux2661081f5ab9cb25359d27f88707a018cf4e68e9 < 9b9ba386d7bfdbc38445932c90fa9444c0524beaaffected
LinuxLinux2661081f5ab9cb25359d27f88707a018cf4e68e9 < e40515582141a9e7c84b269be699c05236a499a6affected
LinuxLinux2661081f5ab9cb25359d27f88707a018cf4e68e9 < 3b4e76ceae5b5a46c968bd952f551ce173809f63affected
LinuxLinux2661081f5ab9cb25359d27f88707a018cf4e68e9 < cac2815f49d343b2f0acc4973d2c14918ac3ab0caffected
LinuxLinux2661081f5ab9cb25359d27f88707a018cf4e68e9 < ecb15b8ca12c0cbdab81e307e9795214d8b90890affected
LinuxLinux2661081f5ab9cb25359d27f88707a018cf4e68e9 < a1e627af32ed60713941cbfc8075d44cad07f6ddaffected
LinuxLinux2.6.27affected
LinuxLinux0 < 2.6.27unaffected
LinuxLinux4.19.321 <= 4.19.*unaffected
LinuxLinux5.4.283 <= 5.4.*unaffected
LinuxLinux5.10.225 <= 5.10.*unaffected
LinuxLinux5.15.166 <= 5.15.*unaffected
LinuxLinux6.1.107 <= 6.1.*unaffected
LinuxLinux6.6.48 <= 6.6.*unaffected
LinuxLinux6.10.7 <= 6.10.*unaffected
LinuxLinux6.11 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References