CVE-2024-53205

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-53205
In the Linux kernel, the following vulnerability has been resolved: phy: realtek: usb: fix NULL deref in rtk_usb2phy_probe In rtk_usb2phy_probe() devm_kzalloc() may return NULL but this returned value is not checked.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/04e3e9188291a183b27306ddb833722c0d083d6a Patch
https://git.kernel.org/stable/c/0b398b6b6c94315fd2ce3658e3cee96539dbd7b7 Patch
https://git.kernel.org/stable/c/7a784bcdd7e54f0599da3b2360e472238412623e
https://git.kernel.org/stable/c/7e2cde1813418b39b5e95d86e10d6701dccf18af
https://git.kernel.org/stable/c/fb83c9a08324e37f321ffb400809aa4310387d65 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

18 Apr 2025, 14:15

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/7a784bcdd7e54f0599da3b2360e472238412623e -
  • () https://git.kernel.org/stable/c/7e2cde1813418b39b5e95d86e10d6701dccf18af -

14 Jan 2025, 15:51

Type Values Removed Values Added
First Time Linux linux Kernel
Linux
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE CWE-476
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: phy: realtek: usb: corregir deref NULL en rtk_usb2phy_probe En rtk_usb2phy_probe(), devm_kzalloc() puede devolver NULL, pero este valor devuelto no se comprueba.
References () https://git.kernel.org/stable/c/04e3e9188291a183b27306ddb833722c0d083d6a - () https://git.kernel.org/stable/c/04e3e9188291a183b27306ddb833722c0d083d6a - Patch
References () https://git.kernel.org/stable/c/0b398b6b6c94315fd2ce3658e3cee96539dbd7b7 - () https://git.kernel.org/stable/c/0b398b6b6c94315fd2ce3658e3cee96539dbd7b7 - Patch
References () https://git.kernel.org/stable/c/fb83c9a08324e37f321ffb400809aa4310387d65 - () https://git.kernel.org/stable/c/fb83c9a08324e37f321ffb400809aa4310387d65 - Patch
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

27 Dec 2024, 14:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-12-27 14:15

Updated : 2025-04-18 14:15

NVD link : CVE-2024-53205

Mitre link : CVE-2024-53205

CVE.ORG link : CVE-2024-53205

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference