VYPR
← All advisories
Medium severity5.5NVD Advisory· Published Feb 27, 2025· Updated Jun 17, 2026

CVE-2024-57852

CVE-2024-57852

Description

In the Linux kernel, the following vulnerability has been resolved:

firmware: qcom: scm: smc: Handle missing SCM device

Commit ca61d6836e6f ("firmware: qcom: scm: fix a NULL-pointer dereference") makes it explicit that qcom_scm_get_tzmem_pool() can return NULL, therefore its users should handle this.

Affected products

7
  • Linux/Kernel5 versions
    cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=6.11.8,<6.12
    • cpe:2.3:o:linux:linux_kernel:6.12:-:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:6.12:rc7:*:*:*:*:*:*
    • (no CPE)
    • (no CPE)range: 6.12
  • osv-coords2 versions
    pkg:deb/ubuntu/[email protected]?arch=source&distro=oracularpkg:linux/kernel
    < 6.11.0-1014.15+ 1 more
    • (no CPE)range: < 6.11.0-1014.15
    • (no CPE)range: >= 6.12.0, < 6.12.16

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.