CVE-2024-58021

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Feb 27, 2025
Updated: Mar 6, 2025
CWE ID 476

Summary

CVE-2024-58021 is a vulnerability affecting the Linux kernel. Specifically, in the winwing driver, the function winwing_init_led() fails to check for a NULL pointer returned by devm_kasprintf(). This oversight can result in a kernel null pointer dereference error. The issue has been resolved by adding a NULL check in the winwing_init_led() function.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share