CVE-2024-26770 - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: HID: nvidia-shield: Add missing null pointer checks to LED initialization devm_kasprintf() returns a pointer to dynamically allocated memory which can be NULL upon failure. Ensure the allocation was successful by checking the pointer validity. [jkosina@suse.com: tweak changelog a bit]

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/83527a13740f57b45f162e3af4c7db4b88521100
https://git.kernel.org/stable/c/b6eda11c44dc89a681e1c105f0f4660e69b1e183
https://git.kernel.org/stable/c/e71cc4a1e584293deafff1a7dea614b0210d0443
https://lore.kernel.org/linux-cve-announce/2024040307-CVE-2024-26770-1c08@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2024-26770
https://www.cve.org/CVERecord?id=CVE-2024-26770

History

Thu, 12 Sep 2024 08:30:00 +0000

Type	Values Removed	Values Added
Metrics	ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Wed, 11 Sep 2024 13:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-04-03T17:00:56.894Z

Updated: 2024-11-05T09:15:28.984Z

Reserved: 2024-02-19T14:20:24.175Z

Link: CVE-2024-26770

Vulnrichment

Updated: 2024-08-02T00:14:13.354Z

NVD

Status : Awaiting Analysis

Published: 2024-04-03T17:15:52.910

Modified: 2024-04-03T17:24:18.150

Link: CVE-2024-26770

Redhat

Severity : Moderate

Publid Date: 2024-04-03T00:00:00Z

Links: CVE-2024-26770 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-26770", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-02-19T14:20:24.175Z", "datePublished": "2024-04-03T17:00:56.894Z", "dateUpdated": "2024-11-05T09:15:28.984Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-11-05T09:15:28.984Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: nvidia-shield: Add missing null pointer checks to LED initialization\n\ndevm_kasprintf() returns a pointer to dynamically allocated memory\nwhich can be NULL upon failure. Ensure the allocation was successful\nby checking the pointer validity.\n\n[jkosina@suse.com: tweak changelog a bit]"}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/hid/hid-nvidia-shield.c"], "versions": [{"version": "1da177e4c3f4", "lessThan": "83527a13740f", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "e71cc4a1e584", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "b6eda11c44dc", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/hid/hid-nvidia-shield.c"], "versions": [{"version": "6.6.19", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.7.7", "lessThanOrEqual": "6.7.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.8", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/83527a13740f57b45f162e3af4c7db4b88521100"}, {"url": "https://git.kernel.org/stable/c/e71cc4a1e584293deafff1a7dea614b0210d0443"}, {"url": "https://git.kernel.org/stable/c/b6eda11c44dc89a681e1c105f0f4660e69b1e183"}], "title": "HID: nvidia-shield: Add missing null pointer checks to LED initialization", "x_generator": {"engine": "bippy-9e1c9544281a"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T00:14:13.354Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/83527a13740f57b45f162e3af4c7db4b88521100", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/e71cc4a1e584293deafff1a7dea614b0210d0443", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/b6eda11c44dc89a681e1c105f0f4660e69b1e183", "tags": ["x_transferred"]}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-26770", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-09-10T15:51:24.782459Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-11T17:33:11.391Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/83527a13740f57b45f162e3af4c7db4b88521100", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/e71cc4a1e584293deafff1a7dea614b0210d0443", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/b6eda11c44dc89a681e1c105f0f4660e69b1e183", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T00:14:13.354Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-26770", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-09-10T15:51:24.782459Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-11T12:42:15.217Z"}}], "cna": {"title": "HID: nvidia-shield: Add missing null pointer checks to LED initialization", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "1da177e4c3f4", "lessThan": "83527a13740f", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "e71cc4a1e584", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "b6eda11c44dc", "versionType": "git"}], "programFiles": ["drivers/hid/hid-nvidia-shield.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "unaffected", "version": "6.6.19", "versionType": "custom", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.7.7", "versionType": "custom", "lessThanOrEqual": "6.7.*"}, {"status": "unaffected", "version": "6.8", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/hid/hid-nvidia-shield.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/83527a13740f57b45f162e3af4c7db4b88521100"}, {"url": "https://git.kernel.org/stable/c/e71cc4a1e584293deafff1a7dea614b0210d0443"}, {"url": "https://git.kernel.org/stable/c/b6eda11c44dc89a681e1c105f0f4660e69b1e183"}], "x_generator": {"engine": "bippy-a5840b7849dd"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: nvidia-shield: Add missing null pointer checks to LED initialization\n\ndevm_kasprintf() returns a pointer to dynamically allocated memory\nwhich can be NULL upon failure. Ensure the allocation was successful\nby checking the pointer validity.\n\n[jkosina@suse.com: tweak changelog a bit]"}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-05-29T05:22:25.600Z"}}}, "cveMetadata": {"cveId": "CVE-2024-26770", "state": "PUBLISHED", "dateUpdated": "2024-09-11T17:33:11.391Z", "dateReserved": "2024-02-19T14:20:24.175Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-04-03T17:00:56.894Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}

{"bugzilla": {"description": "kernel: HID: nvidia-shield: Add missing null pointer checks to LED initialization", "id": "2273240", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2273240"}, "csaw": false, "cvss3": {"cvss3_base_score": "4.4", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-170", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nHID: nvidia-shield: Add missing null pointer checks to LED initialization\ndevm_kasprintf() returns a pointer to dynamically allocated memory\nwhich can be NULL upon failure. Ensure the allocation was successful\nby checking the pointer validity.\n[jkosina@suse.com: tweak changelog a bit]", "A vulnerability was found in the Linux kernel during LED initialization in the devm_kasprintf() function, which returns a pointer to dynamically allocated memory. This pointer could return NULL if the function fails, which could result in crashes or undefined behavior."], "name": "CVE-2024-26770", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Out of support scope", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Out of support scope", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Out of support scope", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Under investigation", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Under investigation", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Under investigation", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Under investigation", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2024-04-03T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2024-26770\nhttps://nvd.nist.gov/vuln/detail/CVE-2024-26770\nhttps://lore.kernel.org/linux-cve-announce/2024040307-CVE-2024-26770-1c08@gregkh/T"], "statement": "Red Hat Enterprise Linux 8 is not affected because nvidia-shield code is not present in RHEL 8.\nRed Hat Enterprise Linux 9 not affected because the kconfig for the affected driver is not enabled.", "threat_severity": "Moderate", "upstream_fix": "kernel 6.6.19, kernel 6.7.7, kernel 6.8"}