CVE-2024-24863

{"id": "CVE-2024-24863", "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "security@openanolis.org", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "NONE"}, "impactScore": 4.0, "exploitabilityScore": 0.8}]}, "published": "2024-04-14T13:15:49.330", "references": [{"url": "https://bugzilla.openanolis.cn/show_bug.cgi?id=8750", "source": "security@openanolis.org"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "security@openanolis.org", "description": [{"lang": "en", "value": "CWE-476"}]}], "descriptions": [{"lang": "en", "value": "In malidp_mw_connector_reset, new memory is allocated with kzalloc, but \nno check is performed. In order to prevent null pointer dereferencing, \nensure that mw_state is checked before calling \n__drm_atomic_helper_connector_reset.\n\n"}, {"lang": "es", "value": "En malidp_mw_connector_reset, se asigna nueva memoria con kzalloc, pero no se realiza ninguna verificaci\u00f3n. Para evitar la desreferenciaci\u00f3n del puntero nulo, aseg\u00farese de que mw_state est\u00e9 marcado antes de llamar a __drm_atomic_helper_connector_reset."}], "lastModified": "2024-04-15T13:15:31.997", "sourceIdentifier": "security@openanolis.org"}