CVE-2024-49962

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package()

ACPICA commit 4d4547cf13cca820ff7e0f859ba83e1a610b9fd0

ACPI_ALLOCATE_ZEROED() may fail, elements might be NULL and will cause NULL pointer dereference later.

[ rjw: Subject and changelog edits ]

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

VendorProductVersions
LinuxLinux>= 9957510255724c1c746c9a6264c849e9fdd4cd24, < 4669da66ebc5b09881487f30669b0fcdb462188e; >= 9957510255724c1c746c9a6264c849e9fdd4cd24, < 402b4c6b7500c7cca6972d2456a4a422801035b5; >= 9957510255724c1c746c9a6264c849e9fdd4cd24, < cbb67e245dacd02b5e1d82733892647df1523982; >= 9957510255724c1c746c9a6264c849e9fdd4cd24, < 1c9b8775062f8d854a80caf186af57fc617d454c; >= 9957510255724c1c746c9a6264c849e9fdd4cd24, < f282db38953ad71dd4f3f8877a4e1d37e580e30a; >= 9957510255724c1c746c9a6264c849e9fdd4cd24, < 4588ea78d3904bebb613b0bb025669e75800f546; >= 9957510255724c1c746c9a6264c849e9fdd4cd24, < a907c113a8b66972f15f084d7dff960207b1f71d; >= 9957510255724c1c746c9a6264c849e9fdd4cd24, < ae5d4c7e76ba393d20366dfea1f39f24560ffb1d; >= 9957510255724c1c746c9a6264c849e9fdd4cd24, < a5242874488eba2b9062985bf13743c029821330
LinuxLinux4.4

References

Timeline

Published
Oct 21, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-499635.5In the Linux kernel, the following vulnerability has been resolved: mailbox: bcm2835: Fix timeout during suspend mode During noirq suspendCVE-2024-499645.5In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix memfd_pin_folios free_huge_pages leak memfd_pin_foliosCVE-2024-499655.5In the Linux kernel, the following vulnerability has been resolved: ocfs2: remove unreasonable unlock in ocfs2_read_blocks Patch series "MCVE-2024-499667.8In the Linux kernel, the following vulnerability has been resolved: ocfs2: cancel dqi_sync_work before freeing oinfo ocfs2_global_read_infCVE-2024-499685.5In the Linux kernel, the following vulnerability has been resolved: ext4: filesystems without casefold feature cannot be mounted with siphaCVE-2024-499697.8In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix index out of bounds in DCN30 color transformation CVE-2024-49975.3The WPUpper Share Buttons plugin for WordPress is vulnerable to unauthorized access of data when preparing sharing links for posts and pagesCVE-2024-499705.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Implement bounds check for stream encoder creation in CVE-2024-499715.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Increase array size of dummy_boolean [WHY] dml2_core_CVE-2024-499725.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Deallocate DML memory if allocation fails [Why] When CVE-2024-499735.5In the Linux kernel, the following vulnerability has been resolved: r8169: add tally counter fields added with RTL8125 RTL8125 added fieldCVE-2024-499745.5In the Linux kernel, the following vulnerability has been resolved: NFSD: Limit the number of concurrent async COPY operations Nothing app
CVE-2024-49962: Medium severity, CVSS 5.5 | Vulnix