VYPR
← All advisories
Medium severity5.5NVD Advisory· Published Feb 27, 2025· Updated Jun 17, 2026

CVE-2024-58021

CVE-2024-58021

Description

In the Linux kernel, the following vulnerability has been resolved:

HID: winwing: Add NULL check in winwing_init_led()

devm_kasprintf() can return a NULL pointer on failure,but this returned value in winwing_init_led() is not checked. Add NULL check in winwing_init_led(), to handle kernel NULL pointer dereference error.

Affected products

7
  • Linux/Kernel5 versions
    cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=6.10,<6.12.16
    • cpe:2.3:o:linux:linux_kernel:6.14:rc1:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:6.14:rc2:*:*:*:*:*:*
    • (no CPE)
    • (no CPE)range: 6.10
  • osv-coords2 versions
    pkg:deb/ubuntu/[email protected]?arch=source&distro=oracularpkg:linux/kernel
    < 6.11.0-1014.15+ 1 more
    • (no CPE)range: < 6.11.0-1014.15
    • (no CPE)range: >= 6.10.0, < 6.12.16

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.