CVE-2024-49871

Source
https://cve.org/CVERecord?id=CVE-2024-49871
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-49871.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-49871
Downstream
Related
Published
2024-10-21T18:01:12.711Z
Modified
2026-03-11T07:52:57.201791071Z
Summary
Input: adp5589-keys - fix NULL pointer dereference
Details

In the Linux kernel, the following vulnerability has been resolved:

Input: adp5589-keys - fix NULL pointer dereference

We register a devm action to call adp5589clearconfig() and then pass the i2c client as argument so that we can call i2cgetclientdata() in order to get our device object. However, i2csetclientdata() is only being set at the end of the probe function which means that we'll get a NULL pointer dereference in case the probe function fails early.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/49xxx/CVE-2024-49871.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
30df385e35a48f773b85117fc490152c2395e45b
Fixed
4449fedb8a710043fc0925409eba844c192d4337
Fixed
34e304cc53ae5d3c8e3f08b41dd11e0d4f3e01ed
Fixed
7c3f04223aaf82489472d614c6decee5a1ce8d7f
Fixed
9a38791ee79bd17d225c15a6d1479448be127a59
Fixed
122b160561f6429701a0559a0f39b0ae309488c6
Fixed
fb5cc65f973661241e4a2b7390b429aa7b330c69

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-49871.json"