CVE-2024-53204

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-53204
In the Linux kernel, the following vulnerability has been resolved: phy: realtek: usb: fix NULL deref in rtk_usb3phy_probe In rtk_usb3phy_probe() devm_kzalloc() may return NULL but this returned value is not checked.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/258ea41c926b7b3a16d0d7aa210a1401c4a1601b
https://git.kernel.org/stable/c/48d52d3168749e10c1c37cd4ceccd18625851741 Patch
https://git.kernel.org/stable/c/776f13ad1f88485206f1dca5ef138553106950e5 Patch
https://git.kernel.org/stable/c/bf373d2919d98f3d1fe1b19a0304f72fe74386d9 Patch
https://git.kernel.org/stable/c/e27877990e54bfe4246dd850f7ec8646c999ce58
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

18 Apr 2025, 14:15

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/258ea41c926b7b3a16d0d7aa210a1401c4a1601b -
  • () https://git.kernel.org/stable/c/e27877990e54bfe4246dd850f7ec8646c999ce58 -

13 Jan 2025, 19:51

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: phy: realtek: usb: corregir deref NULL en rtk_usb3phy_probe En rtk_usb3phy_probe(), devm_kzalloc() puede devolver NULL, pero este valor devuelto no se comprueba.
First Time Linux linux Kernel
Linux
CWE CWE-476
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/48d52d3168749e10c1c37cd4ceccd18625851741 - () https://git.kernel.org/stable/c/48d52d3168749e10c1c37cd4ceccd18625851741 - Patch
References () https://git.kernel.org/stable/c/776f13ad1f88485206f1dca5ef138553106950e5 - () https://git.kernel.org/stable/c/776f13ad1f88485206f1dca5ef138553106950e5 - Patch
References () https://git.kernel.org/stable/c/bf373d2919d98f3d1fe1b19a0304f72fe74386d9 - () https://git.kernel.org/stable/c/bf373d2919d98f3d1fe1b19a0304f72fe74386d9 - Patch

27 Dec 2024, 14:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-12-27 14:15

Updated : 2025-04-18 14:15

NVD link : CVE-2024-53204

Mitre link : CVE-2024-53204

CVE.ORG link : CVE-2024-53204

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference