← CVE Intelligence

CVE-2024-24856

NULL pointer deference in acpi_db_convert_to_package of Linux acpi module PUBLISHED

Description (CNA)

The memory allocation function ACPI_ALLOCATE_ZEROED does not guarantee a successful allocation, but the subsequent code directly dereferences the pointer that receives it, which may lead to null pointer dereference. To fix this issue, a null pointer check should be added. If it is null, return exception code AE_NO_MEMORY.

Affected (CNA)

Vendor / productVersions
OpenAnolis / Anolis OSaffected v4.4 before v6.9

CWE

CWE-476

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.