CVE-2024-57985

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-57985
In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: scm: Cleanup global '__scm' on probe failures If SCM driver fails the probe, it should not leave global '__scm' variable assigned, because external users of this driver will assume the probe finished successfully. For example TZMEM parts ('__scm->mempool') are initialized later in the probe, but users of it (__scm_smc_call()) rely on the '__scm' variable. This fixes theoretical NULL pointer exception, triggered via introducing probe deferral in SCM driver with call trace: qcom_tzmem_alloc+0x70/0x1ac (P) qcom_tzmem_alloc+0x64/0x1ac (L) qcom_scm_assign_mem+0x78/0x194 qcom_rmtfs_mem_probe+0x2d4/0x38c platform_probe+0x68/0xc8

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/1e76b546e6fca7eb568161f408133904ca6bcf4f Patch
https://git.kernel.org/stable/c/390d3baeba51a126f75c97b90ec28b9384ce4b84 Patch
https://git.kernel.org/stable/c/faf1715798fe72b79e4432ce8c6d03ca69765425 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

23 Oct 2025, 17:56

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: firmware: qcom: scm: Limpieza de la variable global '__scm' en caso de fallos en la sonda Si el controlador SCM hace que la sonda falle, no debería dejar asignada la variable global '__scm', porque los usuarios externos de este controlador asumirán que la sonda finalizó correctamente. Por ejemplo, las partes TZMEM ('__scm->mempool') se inicializan más tarde en la sonda, pero los usuarios de esta (__scm_smc_call()) dependen de la variable '__scm'. Esto corrige la excepción teórica del puntero NULL, activada mediante la introducción de un aplazamiento de la sonda en el controlador SCM con seguimiento de llamadas: qcom_tzmem_alloc+0x70/0x1ac (P) qcom_tzmem_alloc+0x64/0x1ac (L) qcom_scm_assign_mem+0x78/0x194 qcom_rmtfs_mem_probe+0x2d4/0x38c platform_probe+0x68/0xc8
References () https://git.kernel.org/stable/c/1e76b546e6fca7eb568161f408133904ca6bcf4f - () https://git.kernel.org/stable/c/1e76b546e6fca7eb568161f408133904ca6bcf4f - Patch
References () https://git.kernel.org/stable/c/390d3baeba51a126f75c97b90ec28b9384ce4b84 - () https://git.kernel.org/stable/c/390d3baeba51a126f75c97b90ec28b9384ce4b84 - Patch
References () https://git.kernel.org/stable/c/faf1715798fe72b79e4432ce8c6d03ca69765425 - () https://git.kernel.org/stable/c/faf1715798fe72b79e4432ce8c6d03ca69765425 - Patch
CWE NVD-CWE-noinfo
First Time Linux
Linux linux Kernel
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

27 Feb 2025, 02:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-27 02:15

Updated : 2025-10-23 17:56

NVD link : CVE-2024-57985

Mitre link : CVE-2024-57985

CVE.ORG link : CVE-2024-57985

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo