CVE-2024-53078
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Nov 19, 2024
Updated: Nov 25, 2024
Summary
CVE-2024-53078 is a recently identified vulnerability affecting the Linux kernel. The issue lies in the drm/tegra driver where a NULL vs IS_ERR() check in the probe() function has been incorrectly implemented. The iommu_paging_domain_alloc() function does not return NULL pointers when an error occurs, instead it returns error pointers. This oversight in the check has been addressed in a recent patch to ensure proper error handling in the Linux kernel.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Products
- Linux Kernel
Affected Vendors
- LINUX