In the Linux kernel, the following vulnerability has been resolved:
mmc: mmc_test: Fix NULL dereference on allocation failure
If the "test->highmem = allocpages()" allocation fails then calling _free_pages(test->highmem) will result in a NULL dereference. Also change the error code to -ENOMEM instead of returning success.
[
{
"id": "CVE-2024-45028-166592e4",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"line_hashes": [
"288348904148918466112594768933062379290",
"115737352786329548071470924204034609508",
"28596024301301423619494184689896631402",
"56711830563646357938171929944065933742",
"167896803513648589688859353740587272958",
"294401126589101211968665196666130657250",
"200428537392237173913381835604693327380",
"88435612740085720633206374417942463388",
"49054377802898007893281111715940374444",
"22357297559729646239437522858791323423",
"134557627182387579233075485528765271790",
"182758175839764664140273583150126358512",
"279865813338289128782513020126144037799",
"173857069024503337225161974279631568106"
],
"threshold": 0.9
},
"target": {
"file": "drivers/mmc/core/mmc_test.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e97be13a9f51284da450dd2a592e3fa87b49cdc9"
},
{
"id": "CVE-2024-45028-1d63aa40",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "244529710529271346478073664657725775556",
"length": 885.0
},
"target": {
"file": "drivers/mmc/core/mmc_test.c",
"function": "mtf_test_write"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a1e627af32ed60713941cbfc8075d44cad07f6dd"
},
{
"id": "CVE-2024-45028-269eb037",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "81030132703123822011621196042918081539",
"length": 909.0
},
"target": {
"file": "drivers/mmc/core/mmc_test.c",
"function": "mtf_test_write"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9b9ba386d7bfdbc38445932c90fa9444c0524bea"
},
{
"id": "CVE-2024-45028-48a91609",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"line_hashes": [
"288348904148918466112594768933062379290",
"115737352786329548071470924204034609508",
"28596024301301423619494184689896631402",
"56711830563646357938171929944065933742",
"167896803513648589688859353740587272958",
"294401126589101211968665196666130657250",
"200428537392237173913381835604693327380",
"88435612740085720633206374417942463388",
"49054377802898007893281111715940374444",
"22357297559729646239437522858791323423",
"134557627182387579233075485528765271790",
"182758175839764664140273583150126358512",
"279865813338289128782513020126144037799",
"173857069024503337225161974279631568106"
],
"threshold": 0.9
},
"target": {
"file": "drivers/mmc/core/mmc_test.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ecb15b8ca12c0cbdab81e307e9795214d8b90890"
},
{
"id": "CVE-2024-45028-4bcb7bdc",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"line_hashes": [
"288348904148918466112594768933062379290",
"115737352786329548071470924204034609508",
"28596024301301423619494184689896631402",
"56711830563646357938171929944065933742",
"167896803513648589688859353740587272958",
"294401126589101211968665196666130657250",
"200428537392237173913381835604693327380",
"88435612740085720633206374417942463388",
"49054377802898007893281111715940374444",
"22357297559729646239437522858791323423",
"134557627182387579233075485528765271790",
"182758175839764664140273583150126358512",
"279865813338289128782513020126144037799",
"173857069024503337225161974279631568106"
],
"threshold": 0.9
},
"target": {
"file": "drivers/mmc/core/mmc_test.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a1e627af32ed60713941cbfc8075d44cad07f6dd"
},
{
"id": "CVE-2024-45028-73dd9d25",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "81030132703123822011621196042918081539",
"length": 909.0
},
"target": {
"file": "drivers/mmc/core/mmc_test.c",
"function": "mtf_test_write"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e97be13a9f51284da450dd2a592e3fa87b49cdc9"
},
{
"id": "CVE-2024-45028-80680c55",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "244529710529271346478073664657725775556",
"length": 885.0
},
"target": {
"file": "drivers/mmc/core/mmc_test.c",
"function": "mtf_test_write"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ecb15b8ca12c0cbdab81e307e9795214d8b90890"
},
{
"id": "CVE-2024-45028-9674cf30",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"line_hashes": [
"288348904148918466112594768933062379290",
"115737352786329548071470924204034609508",
"28596024301301423619494184689896631402",
"56711830563646357938171929944065933742",
"167896803513648589688859353740587272958",
"294401126589101211968665196666130657250",
"200428537392237173913381835604693327380",
"88435612740085720633206374417942463388",
"49054377802898007893281111715940374444",
"22357297559729646239437522858791323423",
"134557627182387579233075485528765271790",
"182758175839764664140273583150126358512",
"279865813338289128782513020126144037799",
"173857069024503337225161974279631568106"
],
"threshold": 0.9
},
"target": {
"file": "drivers/mmc/core/mmc_test.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e40515582141a9e7c84b269be699c05236a499a6"
},
{
"id": "CVE-2024-45028-a0772f42",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "81030132703123822011621196042918081539",
"length": 909.0
},
"target": {
"file": "drivers/mmc/core/mmc_test.c",
"function": "mtf_test_write"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2b507b03991f44dfb202fc2a82c9874d1b1f0c06"
},
{
"id": "CVE-2024-45028-a07d9fd1",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"line_hashes": [
"288348904148918466112594768933062379290",
"115737352786329548071470924204034609508",
"28596024301301423619494184689896631402",
"56711830563646357938171929944065933742",
"167896803513648589688859353740587272958",
"294401126589101211968665196666130657250",
"200428537392237173913381835604693327380",
"88435612740085720633206374417942463388",
"49054377802898007893281111715940374444",
"22357297559729646239437522858791323423",
"134557627182387579233075485528765271790",
"182758175839764664140273583150126358512",
"279865813338289128782513020126144037799",
"173857069024503337225161974279631568106"
],
"threshold": 0.9
},
"target": {
"file": "drivers/mmc/core/mmc_test.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2b507b03991f44dfb202fc2a82c9874d1b1f0c06"
},
{
"id": "CVE-2024-45028-b0cffada",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"line_hashes": [
"288348904148918466112594768933062379290",
"115737352786329548071470924204034609508",
"28596024301301423619494184689896631402",
"56711830563646357938171929944065933742",
"167896803513648589688859353740587272958",
"294401126589101211968665196666130657250",
"200428537392237173913381835604693327380",
"88435612740085720633206374417942463388",
"49054377802898007893281111715940374444",
"22357297559729646239437522858791323423",
"134557627182387579233075485528765271790",
"182758175839764664140273583150126358512",
"279865813338289128782513020126144037799",
"173857069024503337225161974279631568106"
],
"threshold": 0.9
},
"target": {
"file": "drivers/mmc/core/mmc_test.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3b4e76ceae5b5a46c968bd952f551ce173809f63"
},
{
"id": "CVE-2024-45028-ea484b19",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "244529710529271346478073664657725775556",
"length": 885.0
},
"target": {
"file": "drivers/mmc/core/mmc_test.c",
"function": "mtf_test_write"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cac2815f49d343b2f0acc4973d2c14918ac3ab0c"
},
{
"id": "CVE-2024-45028-f0833156",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"line_hashes": [
"288348904148918466112594768933062379290",
"115737352786329548071470924204034609508",
"28596024301301423619494184689896631402",
"56711830563646357938171929944065933742",
"167896803513648589688859353740587272958",
"294401126589101211968665196666130657250",
"200428537392237173913381835604693327380",
"88435612740085720633206374417942463388",
"49054377802898007893281111715940374444",
"22357297559729646239437522858791323423",
"134557627182387579233075485528765271790",
"182758175839764664140273583150126358512",
"279865813338289128782513020126144037799",
"173857069024503337225161974279631568106"
],
"threshold": 0.9
},
"target": {
"file": "drivers/mmc/core/mmc_test.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cac2815f49d343b2f0acc4973d2c14918ac3ab0c"
},
{
"id": "CVE-2024-45028-f264c311",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "81030132703123822011621196042918081539",
"length": 909.0
},
"target": {
"file": "drivers/mmc/core/mmc_test.c",
"function": "mtf_test_write"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3b4e76ceae5b5a46c968bd952f551ce173809f63"
},
{
"id": "CVE-2024-45028-f94257f6",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "81030132703123822011621196042918081539",
"length": 909.0
},
"target": {
"file": "drivers/mmc/core/mmc_test.c",
"function": "mtf_test_write"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e40515582141a9e7c84b269be699c05236a499a6"
},
{
"id": "CVE-2024-45028-fccf34da",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"line_hashes": [
"288348904148918466112594768933062379290",
"115737352786329548071470924204034609508",
"28596024301301423619494184689896631402",
"56711830563646357938171929944065933742",
"167896803513648589688859353740587272958",
"294401126589101211968665196666130657250",
"200428537392237173913381835604693327380",
"88435612740085720633206374417942463388",
"49054377802898007893281111715940374444",
"22357297559729646239437522858791323423",
"134557627182387579233075485528765271790",
"182758175839764664140273583150126358512",
"279865813338289128782513020126144037799",
"173857069024503337225161974279631568106"
],
"threshold": 0.9
},
"target": {
"file": "drivers/mmc/core/mmc_test.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9b9ba386d7bfdbc38445932c90fa9444c0524bea"
}
]