CVE-2024-50070

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

pinctrl: stm32: check devm_kasprintf() returned value

devm_kasprintf() can return a NULL pointer on failure but this returned value is not checked. Fix this lack and check the returned value.

Found by code review.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

VendorProductVersions
LinuxLinux>= 75285cb2b49a9bfe15fc22aecab45ef25d50e6f2, < a8d52de0a6c6b091b2771bcb98ce408cf9d69fe3; >= 32c170ff15b044579b1f8b8cdabf543406dde9da, < 3b36bb1fca2b87f6292ca2a8593f297c5e9fab41; >= 32c170ff15b044579b1f8b8cdabf543406dde9da, < 1f266957ae1207b0717c2d69096bc70654ae9fcb; >= 32c170ff15b044579b1f8b8cdabf543406dde9da, < b0f0e3f0552a566def55c844b0d44250c58e4df6
LinuxLinux6.6

References

Timeline

Published
Oct 29, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-500717.8In the Linux kernel, the following vulnerability has been resolved: pinctrl: nuvoton: fix a double free in ma35_pinctrl_dt_node_to_map_funcCVE-2024-500725.5In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Use code segment selector for VERW operand Robert Gill reporCVE-2024-500737.8In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: Fix use-after-free in gsm_cleanup_mux BUG: KASAN: slab-useCVE-2024-500747.8In the Linux kernel, the following vulnerability has been resolved: parport: Proper fix for array out-of-bounds access The recent fix for CVE-2024-500755.5In the Linux kernel, the following vulnerability has been resolved: xhci: tegra: fix checked USB2 port number If USB virtualizatoin is enaCVE-2024-500766.5In the Linux kernel, the following vulnerability has been resolved: vt: prevent kernel-infoleak in con_font_get() font.data may not initiaCVE-2024-500775.5In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix multiple init when debugfs is disabled If bt_debugCVE-2024-500785.5In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Call iso_exit() on module unload If iso_init() has been calCVE-2024-500795.5In the Linux kernel, the following vulnerability has been resolved: io_uring/sqpoll: ensure task state is TASK_RUNNING when running task_woCVE-2024-50088.8In WhatsUp Gold versions released before 2023.1.3, an authenticated user with certain permissions can upload an arbitrary file and obtain CVE-2024-500805.5In the Linux kernel, the following vulnerability has been resolved: ublk: don't allow user copy for unprivileged device UBLK_F_USER_COPY rCVE-2024-500815.5In the Linux kernel, the following vulnerability has been resolved: blk-mq: setup queue ->tag_set before initializing hctx Commit 7b815817
CVE-2024-50070: Medium severity, CVSS 5.5 | Vulnix