CVE-2024-47756

MEDIUM

Linux Kernel 5.4.284-5.5 - NULL Pointer Dereference in PCI Keystone Driver

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: PCI: keystone: Fix if-statement expression in ks_pcie_quirk() This code accidentally uses && where || was intended. It potentially results in a NULL dereference. Thus, fix the if-statement expression to use the correct condition. [kwilczynski: commit log]

References (10)

Core 10
Core References

Scores

CVSS v3 5.5
EPSS 0.0022
EPSS Percentile 12.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-476
Status published
Products (27)
Linux/Linux < 6.11
Linux/Linux 135843c351c08df72bdd4b4ebea53c8052a76881 - dc5aeba07395c8dfa29bb878c8ce4d5180427221
Linux/Linux 5.10.226 - 5.10.227
Linux/Linux 5.10.227 - 5.10.*
Linux/Linux 5.15.167 - 5.15.168
Linux/Linux 5.15.168 - 5.15.*
Linux/Linux 5.4.284 - 5.4.285
Linux/Linux 5.4.285 - 5.4.*
Linux/Linux 576d0fb6f8d4bd4695e70eee173a1b9c7bae9572 - e85ab507882db165c10a858d7f685a0a38f0312e
Linux/Linux 6.1.110 - 6.1.113
... and 17 more
Published Oct 21, 2024
Tracked Since Feb 18, 2026