CVE-2024-35984

MediumCVSS 5.5/10Last modified Oct 15, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

i2c: smbus: fix NULL function pointer dereference

Baruch reported an OOPS when using the designware controller as target only. Target-only modes break the assumption of one transfer function always being available. Fix this by always checking the pointer in __i2c_transfer.

[wsa: dropped the simplification in core-smbus to avoid theoretical regressions]

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

VendorProductVersions
LinuxLinux>= 63453b59e41173241c4efe9335815f6432fa8586, < 40f1d79f07b49c8a64a861706e5163f2db4bd95d; >= 63453b59e41173241c4efe9335815f6432fa8586, < ad3c3ac7a03be3697114f781193dd3e9d97e6e23; >= 63453b59e41173241c4efe9335815f6432fa8586, < 5fd72404587d7db4acb2d241fd8c387afb0a7aec; >= 63453b59e41173241c4efe9335815f6432fa8586, < 5a09eae9a7db597fe0c1fc91636205b4a25d2620; >= 63453b59e41173241c4efe9335815f6432fa8586, < 4e75e222d397c6752b229ed72fc4644c8c36ecde; >= 63453b59e41173241c4efe9335815f6432fa8586, < e3425674ff68dc521c57c6eabad0cbd20a027d85; >= 63453b59e41173241c4efe9335815f6432fa8586, < 357c64ef1ef39b1e7cd91ab6bdd304d043702c83; >= 63453b59e41173241c4efe9335815f6432fa8586, < 91811a31b68d3765b3065f4bb6d7d6d84a7cfc9f
LinuxLinux4.19
SiemensRUGGEDCOM RST2428P< V3.1
SiemensSCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family—
SiemensSCALANCE XCM-/XRM-/XCH-/XRH-300 family< V3.1
SiemensSIMATIC S7-1500 TM MFP - GNU/Linux subsystem< V1.1.1

References

Timeline

Published
May 20, 2024
Last modified
Oct 15, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-359855.5In the Linux kernel, the following vulnerability has been resolved: sched/eevdf: Prevent vlag from going out of bounds in reweight_eevdf() CVE-2024-359867.0In the Linux kernel, the following vulnerability has been resolved: phy: ti: tusb1210: Resolve charger-det crash if charger psy is unregistCVE-2024-359875.5In the Linux kernel, the following vulnerability has been resolved: riscv: Fix loading 64-bit NOMMU kernels past the start of RAM commit 3CVE-2024-359885.5In the Linux kernel, the following vulnerability has been resolved: riscv: Fix TASK_SIZE on 64-bit NOMMU On NOMMU, userspace memory can coCVE-2024-359895.5In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix oops during rmmod on single-CPU platforms During CVE-2024-35995.3The WP Cookie Consent ( for GDPR, CCPA & ePrivacy ) plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capabilCVE-2024-359905.5In the Linux kernel, the following vulnerability has been resolved: dma: xilinx_dpdma: Fix locking There are several places where either cCVE-2024-359915.5In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Convert spinlock to mutex to lock evl workqueue drainCVE-2024-359925.5In the Linux kernel, the following vulnerability has been resolved: phy: marvell: a3700-comphy: Fix out of bounds read There is an out of CVE-2024-359935.5In the Linux kernel, the following vulnerability has been resolved: mm: turn folio_test_hugetlb into a PageType The current folio_test_hugCVE-2024-359945.5In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: uefisecapp: Fix memory related IO errors and crashes ICVE-2024-359955.5In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Use access_width over bit_width for system memory accesses
CVE-2024-35984: Medium severity, CVSS 5.5 | Vulnix