CVE-2024-42248

Summary

CVE-2024-42248 is a vulnerability affecting the Linux kernel. This issue is related to the "tty: serial: ma35d1" driver, where the check for the of_node being NULL was missing. If the "serial" node is absent, the pdev->dev.of_node can be null, leading to undefined behavior. This vulnerability has been addressed by adding a NULL check and returning an error in such cases.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.