CVE-2024-26978

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

serial: max310x: fix NULL pointer dereference in I2C instantiation

When trying to instantiate a max14830 device from userspace:

echo max14830 0x60 > /sys/bus/i2c/devices/i2c-2/new_device

we get the following error:

Unable to handle kernel NULL pointer dereference at virtual address... ... Call trace: max310x_i2c_probe+0x48/0x170 [max310x] i2c_device_probe+0x150/0x2a0 ...

Add check for validity of devtype to prevent the error, and abort probe with a meaningful error message.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

VendorProductVersions
LinuxLinux>= f5c252aaa1be5d38604e58e9bd335065f767d0d8, < 7d271b798add90c6196539167c019d0817285cf0; >= 85d79478710ad2cbf11857aec107084a7104943e, < c45e53c27b78afd6c81fc25608003576f27b5735; >= 2e1f2d9a9bdbe12ee475c82a45ac46a278e8049a, < 12609c76b755dbeb1645c0aacc0f0f4743b2eff3; >= 2e1f2d9a9bdbe12ee475c82a45ac46a278e8049a, < 2160ad6861c4a21d3fa553d7b2aaec6634a37f8a; >= 2e1f2d9a9bdbe12ee475c82a45ac46a278e8049a, < 5cd8af02b466e1beeae13e2de3dc58fcc7925e5a; >= 2e1f2d9a9bdbe12ee475c82a45ac46a278e8049a, < aeca49661fd02fd56fb026768b580ce301b45733; >= 2e1f2d9a9bdbe12ee475c82a45ac46a278e8049a, < 0d27056c24efd3d63a03f3edfbcfc4827086b110; >= 5.4.272, < 5.4.274; >= 5.10.213, < 5.10.215
LinuxLinux6.0

References

Timeline

Published
May 1, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-26988.8A vulnerability was found in FreeIPA in how the initial implementation of MS-SFU by MIT Kerberos was missing a condition for granting the "fCVE-2024-269808.2In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab-out-of-bounds in smb2_allocate_rsp_buf If ->ProtocolIdCVE-2024-269817.8In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix OOB in nilfs_set_de_type The size of the nilfs_type_by_modCVE-2024-269827.1In the Linux kernel, the following vulnerability has been resolved: Squashfs: check the inode number is not the invalid value of zero SyskCVE-2024-269837.8In the Linux kernel, the following vulnerability has been resolved: bootconfig: use memblock_free_late to free xbc memory to buddy On the CVE-2024-269845.5In the Linux kernel, the following vulnerability has been resolved: nouveau: fix instmem race condition around ptr stores Running a lot ofCVE-2024-269855.5In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix bo leak in intel_fb_bo_framebuffer_init Add a unreference CVE-2024-269865.5In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix memory leak in create_process failure Fix memory leak CVE-2024-269875.5In the Linux kernel, the following vulnerability has been resolved: mm/memory-failure: fix deadlock when hugetlb_optimize_vmemmap is enableCVE-2024-269887.8In the Linux kernel, the following vulnerability has been resolved: init/main.c: Fix potential static_command_line memory overflow We alloCVE-2024-269897.8In the Linux kernel, the following vulnerability has been resolved: arm64: hibernate: Fix level3 translation fault in swsusp_save() On armCVE-2024-269905.5In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Write-protect L2 SPTEs in TDP MMU when clearing dirty sta
CVE-2024-26978: Medium severity, CVSS 5.5 | Vulnix