First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2024-42298

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: fsl: fsl_qmc_audio: Check devm_kasprintf() returned value

devm_kasprintf() can return a NULL pointer on failure but this returned value is not checked.

Fix this lack and check the returned value.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Linux	Linux	>= 075c7125b11c72e7933401d73000d6d151196072, < b4205dfcfe96182118e54343954827eda51b2135; >= 075c7125b11c72e7933401d73000d6d151196072, < af466037fa2b263e8ea5c47285513d2487e17d90; >= 075c7125b11c72e7933401d73000d6d151196072, < e62599902327d27687693f6e5253a5d56583db58
Linux	Linux	6.4

References

Timeline

Published: Aug 17, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-422995.5In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Update log->page_{mask,bits} if log->page_size changed If an CVE-2024-42307.8External Control of File Name or Path vulnerability in Edgecross Basic Software for Windows versions 1.00 and later and Edgecross Basic Soft CVE-2024-423004.7In the Linux kernel, the following vulnerability has been resolved: erofs: fix race in z_erofs_get_gbuf() In z_erofs_get_gbuf(), the curre CVE-2024-423017.8In the Linux kernel, the following vulnerability has been resolved: dev/parport: fix the array out-of-bounds risk Fixed array out-of-bound CVE-2024-423027.8In the Linux kernel, the following vulnerability has been resolved: PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal Keith re CVE-2024-423035.5In the Linux kernel, the following vulnerability has been resolved: media: imx-pxp: Fix ERR_PTR dereference in pxp_probe() devm_regmap_ini CVE-2024-423045.5In the Linux kernel, the following vulnerability has been resolved: ext4: make sure the first directory block is not a hole The syzbot con CVE-2024-423055.5In the Linux kernel, the following vulnerability has been resolved: ext4: check dot and dotdot of dx_root before making dir indexed Syzbot CVE-2024-423065.5In the Linux kernel, the following vulnerability has been resolved: udf: Avoid using corrupted block bitmap buffer When the filesystem blo CVE-2024-423075.5In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential null pointer use in destroy_workqueue in init_cifs CVE-2024-423095.5In the Linux kernel, the following vulnerability has been resolved: drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes I CVE-2024-42314.6This vulnerability exists in Digisol Router (DG-GR1321: Hardware version 3.7L; Firmware version : v3.2.02) due to presence of root terminal

CVE-2024-42298: Medium severity, CVSS 5.5 | Vulnix