CVE-2024-50069

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

pinctrl: apple: check devm_kasprintf() returned value

devm_kasprintf() can return a NULL pointer on failure but this returned value is not checked. Fix this lack and check the returned value.

Found by code review.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

VendorProductVersions
LinuxLinux>= a0f160ffcb83de6a04fa75f9e7bdfe969f2863f7, < 0a4d4dbef622ac8796a6665e0080da2685f9220a; >= a0f160ffcb83de6a04fa75f9e7bdfe969f2863f7, < fad940e2dd789155f99ecafa71a7baf6f96530bc; >= a0f160ffcb83de6a04fa75f9e7bdfe969f2863f7, < 4d2296fb7c80fdc9925d29a8e85d617cad08731a; >= a0f160ffcb83de6a04fa75f9e7bdfe969f2863f7, < 665a58fe663ac7a9ea618dc0b29881649324b116
LinuxLinux5.16

References

Timeline

Published
Oct 29, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-500705.5In the Linux kernel, the following vulnerability has been resolved: pinctrl: stm32: check devm_kasprintf() returned value devm_kasprintf()CVE-2024-500717.8In the Linux kernel, the following vulnerability has been resolved: pinctrl: nuvoton: fix a double free in ma35_pinctrl_dt_node_to_map_funcCVE-2024-500725.5In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Use code segment selector for VERW operand Robert Gill reporCVE-2024-500737.8In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: Fix use-after-free in gsm_cleanup_mux BUG: KASAN: slab-useCVE-2024-500747.8In the Linux kernel, the following vulnerability has been resolved: parport: Proper fix for array out-of-bounds access The recent fix for CVE-2024-500755.5In the Linux kernel, the following vulnerability has been resolved: xhci: tegra: fix checked USB2 port number If USB virtualizatoin is enaCVE-2024-500766.5In the Linux kernel, the following vulnerability has been resolved: vt: prevent kernel-infoleak in con_font_get() font.data may not initiaCVE-2024-500775.5In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix multiple init when debugfs is disabled If bt_debugCVE-2024-500785.5In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Call iso_exit() on module unload If iso_init() has been calCVE-2024-500795.5In the Linux kernel, the following vulnerability has been resolved: io_uring/sqpoll: ensure task state is TASK_RUNNING when running task_woCVE-2024-50088.8In WhatsUp Gold versions released before 2023.1.3, an authenticated user with certain permissions can upload an arbitrary file and obtain CVE-2024-500805.5In the Linux kernel, the following vulnerability has been resolved: ublk: don't allow user copy for unprivileged device UBLK_F_USER_COPY r
CVE-2024-50069: Medium severity, CVSS 5.5 | Vulnix