CVE-2024-58021
MEDIUMLinux Kernel 6.10-6.12.15, 6.13.0-6.13.3 - NULL Pointer Dereference in HID winwing LED Initialization
Title source: llmDescription
In the Linux kernel, the following vulnerability has been resolved: HID: winwing: Add NULL check in winwing_init_led() devm_kasprintf() can return a NULL pointer on failure,but this returned value in winwing_init_led() is not checked. Add NULL check in winwing_init_led(), to handle kernel NULL pointer dereference error.
References (3)
Core 3
Scores
CVSS v3
5.5
EPSS
0.0019
EPSS Percentile
8.8%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-476
Status
published
Products (12)
linux/Kernel
6.10.0 - 6.12.16linux
linux/Kernel
6.13.0 - 6.13.4linux
Linux/Linux
< 6.10
Linux/Linux
266c990debad2f9589c7a412e897a8e312b09766 - 4001f6f79183b8868d80dd2036dfb4ea3d325e8f
Linux/Linux
266c990debad2f9589c7a412e897a8e312b09766 - 45ab5166a82d038c898985b0ad43ead69c1f9573
Linux/Linux
266c990debad2f9589c7a412e897a8e312b09766 - b99dbdee8a89c44d03ae9830ab19f31e124a3f32
Linux/Linux
6.10
Linux/Linux
6.12.16 - 6.12.*
Linux/Linux
6.13.4 - 6.13.*
Linux/Linux
6.14
... and 2 more
Published
Feb 27, 2025
Tracked Since
Feb 18, 2026