CVE-2024-26770

medium

Description

In the Linux kernel, the following vulnerability has been resolved: HID: nvidia-shield: Add missing null pointer checks to LED initialization devm_kasprintf() returns a pointer to dynamically allocated memory which can be NULL upon failure. Ensure the allocation was successful by checking the pointer validity. [[email protected]: tweak changelog a bit]

References

https://git.kernel.org/stable/c/e71cc4a1e584293deafff1a7dea614b0210d0443

https://git.kernel.org/stable/c/b6eda11c44dc89a681e1c105f0f4660e69b1e183

https://git.kernel.org/stable/c/83527a13740f57b45f162e3af4c7db4b88521100

Details

Source: Mitre, NVD

Published: 2024-04-03

Updated: 2024-04-03

Risk Information

CVSS v2

Base Score: 2.1

Vector: CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:P

Severity: Low

CVSS v3

Base Score: 5.5

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Severity: Medium