CVE-2024-53205

MEDIUM

Linux Kernel 6.6-6.11.10 - NULL Pointer Dereference in rtk_usb2phy_probe

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: phy: realtek: usb: fix NULL deref in rtk_usb2phy_probe In rtk_usb2phy_probe() devm_kzalloc() may return NULL but this returned value is not checked.

References (5)

Core 5

Scores

CVSS v3 5.5
EPSS 0.0026
EPSS Percentile 17.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-476
Status published
Products (18)
linux/Kernel 6.12.0 - 6.12.2linux
linux/Kernel 6.6.0 - 6.6.4linux
linux/Kernel 6.7.0 - 6.7linux
linux/Kernel 6.9.0 - 6.11.11linux
Linux/Linux < 6.6
Linux/Linux 134e6d25f6bd06071e5aac0a7eefcea6f7713955 - 7a784bcdd7e54f0599da3b2360e472238412623e
Linux/Linux 134e6d25f6bd06071e5aac0a7eefcea6f7713955 - 7e2cde1813418b39b5e95d86e10d6701dccf18af
Linux/Linux 6.11.11 - 6.11.*
Linux/Linux 6.12.2 - 6.12.*
Linux/Linux 6.13
... and 8 more
Published Dec 27, 2024
Tracked Since Feb 18, 2026