Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2024-36014— drm/arm/malidp: fix a possible null pointer dereference

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于在 malidp_mw_connector_reset 中，使用 kzalloc 分配新内存，但不执行任何检查，导致空指针取消引用。

AI Predicted 7.8 Difficulty: Easy EPSS 0.25% · P15

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Affected Version Matrix 20

VendorProduct Version RangeStatus
Linux Linux 8cbc5caf36ef7a299b5cbedf55f27fd898d700bf< b6cc5dd06336ed8bb3a7a1fc5aaf7d5e88bc0818 affected
8cbc5caf36ef7a299b5cbedf55f27fd898d700bf< 565d9ad7e5a18eb69ed8b66a9e9bb3f45346520c affected
8cbc5caf36ef7a299b5cbedf55f27fd898d700bf< a5fa5b40a278a3ca978fed64707bd27614adb1eb affected
8cbc5caf36ef7a299b5cbedf55f27fd898d700bf< 3e54d4e95120641216dfe91a6c49f116a9f68490 affected
8cbc5caf36ef7a299b5cbedf55f27fd898d700bf< e4b52d49383306ef73fd1bd9102538beebb0fe07 affected
8cbc5caf36ef7a299b5cbedf55f27fd898d700bf< 335cc45ef2b81b68be63c698b4f867a530bdf7a5 affected
8cbc5caf36ef7a299b5cbedf55f27fd898d700bf< b77620730f614059db2470e8ebab3e725280fc6d affected
8cbc5caf36ef7a299b5cbedf55f27fd898d700bf< 93f76ec1eddce60dbb5885cbc0d7df54adee4639 affected
… +12 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2024-36014

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
drm/arm/malidp: fix a possible null pointer dereference
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: drm/arm/malidp: fix a possible null pointer dereference In malidp_mw_connector_reset, new memory is allocated with kzalloc, but no check is performed. In order to prevent null pointer dereferencing, ensure that mw_state is checked before calling __drm_atomic_helper_connector_reset.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于在 malidp_mw_connector_reset 中，使用 kzalloc 分配新内存，但不执行任何检查，导致空指针取消引用。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux 8cbc5caf36ef7a299b5cbedf55f27fd898d700bf ~ b6cc5dd06336ed8bb3a7a1fc5aaf7d5e88bc0818 -
Linux Linux 4.19 -

II. Public POCs for CVE-2024-36014

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2024-36014

请登录查看更多情报信息。

Mailing List Discussions for CVE-2024-36014 (1)

Other References for CVE-2024-36014 (9)

Same Patch Batch · Linux · 2024-05-29 · 4 CVEs total

CVE-2023-52881 9.8 CRITICAL tcp: do not accept ACK of bytes we never sent
CVE-2024-36016 7.8 HIGH tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
CVE-2024-36015 ppdev: Add an error check in register_device

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2024-36014

No comments yet

Leave a comment