Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2024-26978 Details

Description

In the Linux kernel, the following vulnerability has been resolved: serial: max310x: fix NULL pointer dereference in I2C instantiation When trying to instantiate a max14830 device from userspace: echo max14830 0x60 > /sys/bus/i2c/devices/i2c-2/new_device we get the following error: Unable to handle kernel NULL pointer dereference at virtual address... ... Call trace: max310x_i2c_probe+0x48/0x170 [max310x] i2c_device_probe+0x150/0x2a0 ... Add check for validity of devtype to prevent the error, and abort probe with a meaningful error message.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:5.5 MEDIUMVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://git.kernel.org/stable/c/0d27056c24efd3d63a03f3edfbcfc4827086b110	kernel.org	Patch
https://git.kernel.org/stable/c/12609c76b755dbeb1645c0aacc0f0f4743b2eff3	kernel.org	Patch
https://git.kernel.org/stable/c/2160ad6861c4a21d3fa553d7b2aaec6634a37f8a	kernel.org	Patch
https://git.kernel.org/stable/c/5cd8af02b466e1beeae13e2de3dc58fcc7925e5a	kernel.org	Patch
https://git.kernel.org/stable/c/7d271b798add90c6196539167c019d0817285cf0	kernel.org	Patch
https://git.kernel.org/stable/c/aeca49661fd02fd56fb026768b580ce301b45733	kernel.org	Patch
https://git.kernel.org/stable/c/c45e53c27b78afd6c81fc25608003576f27b5735	kernel.org	Patch
https://git.kernel.org/stable/c/0d27056c24efd3d63a03f3edfbcfc4827086b110	CVE	Patch
https://git.kernel.org/stable/c/12609c76b755dbeb1645c0aacc0f0f4743b2eff3	CVE	Patch
https://git.kernel.org/stable/c/2160ad6861c4a21d3fa553d7b2aaec6634a37f8a	CVE	Patch
https://git.kernel.org/stable/c/5cd8af02b466e1beeae13e2de3dc58fcc7925e5a	CVE	Patch
https://git.kernel.org/stable/c/7d271b798add90c6196539167c019d0817285cf0	CVE	Patch
https://git.kernel.org/stable/c/aeca49661fd02fd56fb026768b580ce301b45733	CVE	Patch
https://git.kernel.org/stable/c/c45e53c27b78afd6c81fc25608003576f27b5735	CVE	Patch
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html	CVE

see all 15 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-476	NULL Pointer Dereference	[email protected]
CWE-476	NULL Pointer Dereference	CISA-ADP

Affected Products

Product	Versions
linux linux kernel	< 5.4.274 >= 5.5, < 5.10.215 >= 5.11, < 6.1.84 >= 6.2, < 6.6.24 >= 6.7, < 6.7.12
CPE cpe:2.3:o:linux:linux_kernel:::::::: Remediation No remediation found in references.

Change History

10 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	kernel.org
Jun 17, 2026	CVE Modified	CISA-ADP
Nov 21, 2024	CVE Modified	CVE
Nov 5, 2024	CVE Modified	kernel.org
Jul 3, 2024	CVE Modified	CISA-ADP
Jun 25, 2024	CVE Modified	kernel.org
May 29, 2024	CVE Modified	kernel.org
May 23, 2024	Initial Analysis	[email protected]
May 14, 2024	CVE Modified	kernel.org
May 1, 2024	New CVE Received	kernel.org