CVE-2024-58011
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Feb 27, 2025
Updated: Mar 6, 2025
CWE ID 476
Summary
CVE-2024-58011: A vulnerability affecting the Linux kernel has been addressed. In the int3472 driver, a null pointer check was missing when accessing the adev variable. This issue could potentially occur when a user manually binds an int3472 driver to an i2c/platform device through sysfs, and the adev companion fwnode is not present. The absence of adev would result in a NULL pointer dereference in skl_int3472_get_acpi_buffer(), posing a risk. To mitigate this, a check for adev not being set and returning -ENODEV has been implemented.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.