CVE-2024-38550

Source
https://cve.org/CVERecord?id=CVE-2024-38550
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-38550.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-38550
Downstream
BELL (1)
DEBIAN (1)
MGASA (2)
OESA (1)
SUSE (8)
UBUNTU (1)
Related
Published
2024-06-19T13:35:22Z
Modified
2026-10-20T10:31:00Z
Severity
  • 4.4 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
ASoC: kirkwood: Fix potential NULL dereference
Details

In the Linux kernel, the following vulnerability has been resolved:

ASoC: kirkwood: Fix potential NULL dereference

In kirkwood_dma_hw_params() mv_mbus_dram_info() returns NULL if CONFIG_PLAT_ORION macro is not defined. Fix this bug by adding NULL check.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/38xxx/CVE-2024-38550.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
bb6a40fc5a830cae45ddd5cd6cfa151b008522ed
Fixed
d48d0c5fd733bd6d8d3ddb2ed553777ab4724169
Fixed
de9987cec6fde1dd41dfcb971433e05945852489
Fixed
1a7254525ca7a6f3e37d7882d7f7ad97f6235f7c
Fixed
5bf5154739cd676b6d0958079070557c8d96afb6
Fixed
802b49e39da669b54bd9b77dc3c649999a446bf6
Fixed
ea60ab95723f5738e7737b56dda95e6feefa5b50
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
5.13.12
Fixed
5.14
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
145951900b763dc32bf31bd770f3f036a8348424

Affected versions

v5.*
v5.13.12
v5.13.13
v5.13.14
v5.13.15
v5.13.16
v5.13.17
v5.13.18
v5.13.19

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-38550.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.14.0
Fixed
5.15.161
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.93
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.33
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.8.12
Type
ECOSYSTEM
Events
Introduced
6.9.0
Fixed
6.9.3

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-38550.json"