CVE-2024-50137

MEDIUM

Linux Kernel 6.4-6.11.6 - Null Pointer Dereference in StarFive JH7110 Reset Driver

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: reset: starfive: jh71x0: Fix accessing the empty member on JH7110 SoC data->asserted will be NULL on JH7110 SoC since commit 82327b127d41 ("reset: starfive: Add StarFive JH7110 reset driver") was added. Add the judgment condition to avoid errors when calling reset_control_status on JH7110 SoC.

References (3)

Core 3

Core References

Patch

https://git.kernel.org/stable/c/3918b2016d28c9b2bddd5ab194ab366a4e2310f5

Patch

https://git.kernel.org/stable/c/c923f1fb8ae8627322d167b73bb4f978404a05de

Patch

https://git.kernel.org/stable/c/2cf59663660799ce16f4dfbed97cdceac7a7fa11

Scores

CVSS v3 5.5

EPSS 0.0021

EPSS Percentile 11.9%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

Status published

Products (12)

linux/Kernel 6.4.0 - 6.6.86linux

linux/Kernel 6.7.0 - 6.11.6linux

Linux/Linux < 6.4

Linux/Linux 6.11.6 - 6.11.*

Linux/Linux 6.12

Linux/Linux 6.4

Linux/Linux 6.6.86 - 6.6.*

Linux/Linux 82327b127d4117e5b867cca945f97a5074aef786 - 2cf59663660799ce16f4dfbed97cdceac7a7fa11

Linux/Linux 82327b127d4117e5b867cca945f97a5074aef786 - 3918b2016d28c9b2bddd5ab194ab366a4e2310f5

Linux/Linux 82327b127d4117e5b867cca945f97a5074aef786 - c923f1fb8ae8627322d167b73bb4f978404a05de

... and 2 more

Published Nov 05, 2024

Tracked Since Feb 18, 2026