CVE-2024-53205
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Dec 27, 2024
Updated: Jan 14, 2025
CWE ID 476
Summary
CVE-2024-53205 is a recently identified vulnerability affecting the Linux kernel. In the driver for Realtek USB to Ethernet adapters, the function rtk_usb2phy_probe contains a NULL dereference issue. This arises due to the fact that devm_kzalloc() may return NULL, but this potential null value is not properly checked in the function. If exploited, this vulnerability could lead to unintended code execution or system instability. Linux users are advised to apply the relevant patches to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Linux Kernel
Affected Vendors
- LINUX