CVE-2024-43822
In the Linux kernel, the following vulnerability has been resolved: ASoc: PCM6240: Return directly after a failed devm_kzalloc() in pcmdevice_i2c_probe() The value “-ENOMEM” was assigned to the local variable “ret” in one if branch after a devm_kzalloc() call failed at the beginning. This error code will trigger then a pcmdevice_remove() call with a passed null pointer so that an undesirable dereference will be performed. Thus return the appropriate error code directly.
- Score
- CVSS 3.1 5.5 Medium
- Status
- Analyzed - 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- Published
- 2024-08-17
- Last modified
- 2026-05-11
- Weaknesses
- CWE-476
Affected products
References
- https://git.kernel.org/stable/c/3722873d49a1788d5420894d4f6f63e35f5c1f13
- https://git.kernel.org/stable/c/fa6f16eff7320c91e908309e31be34cbbe4b7e58
