In the Linux kernel, the following vulnerability has been resolved:
ACPI: x86: Add adev NULL check to acpiquirkskipserdevenumeration()
acpidevhid_match() does not check for adev == NULL, dereferencing it unconditional.
Add a check for adev being NULL before calling acpidevhid_match().
At the moment acpiquirkskipserdevenumeration() is never called with a controller_parent without an ACPI companion, but better safe than sorry.
[
{
"digest": {
"line_hashes": [
"12244891913596800670078724187239058517",
"318671702939665888925059166192426735205",
"268298266262710041848615347585340013236",
"37474654349622988644006576064637293895"
],
"threshold": 0.9
},
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e173bce05f7032a8b4964cfef82a4b7668f5f3af",
"target": {
"file": "drivers/acpi/x86/utils.c"
},
"id": "CVE-2024-56782-1c451dc6",
"deprecated": false,
"signature_version": "v1"
},
{
"digest": {
"function_hash": "123493313961437186063732638325875395524",
"length": 280.0
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4a49194f587a62d972b602e3e1a2c3cfe6567966",
"target": {
"file": "drivers/acpi/x86/utils.c",
"function": "acpi_quirk_skip_serdev_enumeration"
},
"id": "CVE-2024-56782-222fc5bf",
"deprecated": false,
"signature_version": "v1"
},
{
"digest": {
"line_hashes": [
"12244891913596800670078724187239058517",
"318671702939665888925059166192426735205",
"268298266262710041848615347585340013236",
"37474654349622988644006576064637293895"
],
"threshold": 0.9
},
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4a49194f587a62d972b602e3e1a2c3cfe6567966",
"target": {
"file": "drivers/acpi/x86/utils.c"
},
"id": "CVE-2024-56782-2fc87ff4",
"deprecated": false,
"signature_version": "v1"
},
{
"digest": {
"function_hash": "123493313961437186063732638325875395524",
"length": 280.0
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e173bce05f7032a8b4964cfef82a4b7668f5f3af",
"target": {
"file": "drivers/acpi/x86/utils.c",
"function": "acpi_quirk_skip_serdev_enumeration"
},
"id": "CVE-2024-56782-d917b59e",
"deprecated": false,
"signature_version": "v1"
}
]