CVE-2024-57852

Summary

In the Linux kernel, the following vulnerability has been resolved:

firmware: qcom: scm: smc: Handle missing SCM device

Commit ca61d6836e6f ("firmware: qcom: scm: fix a NULL-pointer dereference") makes it explicit that qcom_scm_get_tzmem_pool() can return NULL, therefore its users should handle this.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxca61d6836e6f4442a77762e1074d2706a2a6e578 < cd955b75849b58b650ca3f87b83bd78cde1da8bcaffected
LinuxLinuxca61d6836e6f4442a77762e1074d2706a2a6e578 < 57a811c0886f3f3677bb4619502b35b5bb917f2eaffected
LinuxLinuxca61d6836e6f4442a77762e1074d2706a2a6e578 < 94f48ecf0a538019ca2025e0b0da391f8e7cc58caffected
LinuxLinux3d36e2b1d803f0d1cc674115d295a8f20ddb9268affected
LinuxLinux6.11.8 < 6.12affected
LinuxLinux6.12affected
LinuxLinux0 < 6.12unaffected
LinuxLinux6.12.16 <= 6.12.*unaffected
LinuxLinux6.13.4 <= 6.13.*unaffected
LinuxLinux6.14 <= *unaffected

Weaknesses

References