Log in Start free

Vulnerability · Published Jun 24, 2024 · Assigned by Linux

CVE-2024-34030PCI: of_property: Return error for int_map allocation failure

Medium 4.7

In plain English

A medium-severity null pointer dereference in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 12% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)4.7Medium
Exploit odds (30 days)0.2%top 88.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: PCI: of_property: Return error for int_map allocation failure Return -ENOMEM from of_pci_prop_intr_map() if kcalloc() fails to prevent a NULL pointer dereference in this case. [bhelgaas: commit log]

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:13linux6.9.7-1DEBIAN-CVE-2024-34030
Debian:14linux6.9.7-1DEBIAN-CVE-2024-34030
Ubuntu:24.04:LTSlinux6.8.0-44.44USN-6999-1
Ubuntu:24.04:LTSlinux6.8.0-44.44UBUNTU-CVE-2024-34030
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2024-34030
Ubuntu:24.04:LTSlinux-aws6.8.0-1015.16UBUNTU-CVE-2024-34030
Ubuntu:24.04:LTSlinux-aws6.8.0-1015.16USN-6999-1
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2024-34030
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2024-34030
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1015.16~22.04.1UBUNTU-CVE-2024-34030
Ubuntu:24.04:LTSlinux-azure6.8.0-1014.16UBUNTU-CVE-2024-34030
Ubuntu:24.04:LTSlinux-azure6.8.0-1014.16USN-7004-1
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2024-34030
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2024-34030
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1014.16~22.04.1UBUNTU-CVE-2024-34030
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2024-34030
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2024-34030
Ubuntu:24.04:LTSlinux-gcp6.8.0-1014.16USN-6999-1
Ubuntu:24.04:LTSlinux-gcp6.8.0-1014.16UBUNTU-CVE-2024-34030
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2024-34030
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2024-34030
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1014.16~22.04.1UBUNTU-CVE-2024-34030
Ubuntu:24.04:LTSlinux-gke6.8.0-1010.13UBUNTU-CVE-2024-34030
Ubuntu:24.04:LTSlinux-gke6.8.0-1010.13USN-6999-1
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2024-34030
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2024-34030
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-45.45~22.04.1UBUNTU-CVE-2024-34030
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-45.45~22.04.1USN-7029-1
Ubuntu:24.04:LTSlinux-ibm6.8.0-1012.12USN-6999-1
Ubuntu:24.04:LTSlinux-ibm6.8.0-1012.12UBUNTU-CVE-2024-34030
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2024-34030
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-44.44.1USN-6999-1
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-44.44.1UBUNTU-CVE-2024-34030
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2024-34030
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2024-34030
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-44.44.1~22.04.1UBUNTU-CVE-2024-34030
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-44.44.1~22.04.1USN-7008-1
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1013.14UBUNTU-CVE-2024-34030
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1013.14USN-7005-1
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2024-34030
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1013.14~22.04.1UBUNTU-CVE-2024-34030
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1013.14~22.04.1USN-7005-2
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1013.14.1USN-7005-1
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1013.14.1UBUNTU-CVE-2024-34030
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2024-34030
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2024-34030
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2024-34030
Ubuntu:24.04:LTSlinux-oem-6.86.8.0-1012.12UBUNTU-CVE-2024-34030
Ubuntu:24.04:LTSlinux-oem-6.86.8.0-1012.12USN-6999-1
Ubuntu:24.04:LTSlinux-oracle6.8.0-1012.12USN-6999-1
Ubuntu:24.04:LTSlinux-oracle6.8.0-1012.12UBUNTU-CVE-2024-34030
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1012.12~22.04.1UBUNTU-CVE-2024-34030
Ubuntu:24.04:LTSlinux-raspi6.8.0-1011.12USN-6999-2
Ubuntu:24.04:LTSlinux-raspi6.8.0-1011.12UBUNTU-CVE-2024-34030
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2024-34030
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2024-34030
Ubuntu:24.04:LTSlinux-riscv6.8.0-44.44.1UBUNTU-CVE-2024-34030
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2024-34030
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-44.44.1~22.04.1UBUNTU-CVE-2024-34030
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2024-34030
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2024-34030

Affected products (as reported)

VendorProductVersions
Linux Linux 407d1a51921e9f28c1bcec647c2205925bd1fdab – before b5f31d1470c4fdfae368feeb389768ba8d24fb34407d1a51921e9f28c1bcec647c2205925bd1fdab – before 598e4a37a2f8da9144ba1fab04320c32169b6d0d407d1a51921e9f28c1bcec647c2205925bd1fdab – before e6f7d27df5d208b50cae817a91d128fb434bb12c
Linux Linux 6.6

Weakness: CWE-476 · Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

References