← CVE Intelligence

CVE-2024-49860

ACPI: sysfs: validate return type of _STR method PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: ACPI: sysfs: validate return type of _STR method Only buffer objects are valid return values of _STR. If something else is returned description_show() will access invalid memory.

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected d1efe3c324ead77d3f6cd85093b50f6bd2e17aba before 92fd5209fc014405f63a7db79802ca4b01dc0c05; affected d1efe3c324ead77d3f6cd85093b50f6bd2e17aba before 2364b6af90c6b6d8a4783e0d3481ca80af699554; affected d1efe3c324ead77d3f6cd85093b50f6bd2e17aba before 4b081991c4363e072e1748efed0bbec8a77daba5; affected d1efe3c324ead77d3f6cd85093b50f6bd2e17aba before 0cdfb9178a3bba843c95c2117c82c15f1a64b9ce; affected d1efe3c324ead77d3f6cd85093b50f6bd2e17aba before 5c8d007c14aefc3f2ddf71e4c40713733dc827be; affected d1efe3c324ead77d3f6cd85093b50f6bd2e17aba before f0921ecd4ddc14646bb5511f49db4d7d3b0829f0; affected d1efe3c324ead77d3f6cd85093b50f6bd2e17aba before f51e5a88f2e7224858b261546cf6b3037dfb1323; affected d1efe3c324ead77d3f6cd85093b50f6bd2e17aba before f51f711d36e61fbb87c67b524fd200e05172668d; affected d1efe3c324ead77d3f6cd85093b50f6bd2e17aba before 4bb1e7d027413835b086aed35bc3f0713bc0f72b
Linux / Linuxaffected 3.7; unaffected 0 before 3.7; unaffected 4.19.323 through 4.19.*; unaffected 5.4.285 through 5.4.*; unaffected 5.10.227 through 5.10.*; unaffected 5.15.168 through 5.15.*; unaffected 6.1.113 through 6.1.*; unaffected 6.6.54 through 6.6.*; unaffected 6.10.13 through 6.10.*; unaffected 6.11.2 through 6.11.*; unaffected 6.12 through *

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.