CVE-2024-43860

Summary

CVE-2024-43860: In the Linux kernel, a vulnerability was identified in the 'remoteproc' subsystem of the Imx RPROC driver. This issue arises when 'nph' is not initialized properly during 'imx_rproc_addr_init()'. If a phandle in the loop is empty, 'of_parse_phandle()' may return NULL, leading to a subsequent NULL dereference. The Linux Verification Center discovered this flaw with SVACE. To mitigate this vulnerability, the kernel developers added a NULL-return check.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.