CVE-2024-35790 Details
Description
In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group The DisplayPort driver's sysfs nodes may be present to the userspace before typec_altmode_set_drvdata() completes in dp_altmode_probe. This means that a sysfs read can trigger a NULL pointer error by deferencing dp->hpd in hpd_show or dp->lock in pin_assignment_show, as dev_get_drvdata() returns NULL in those cases. Remove manual sysfs node creation in favor of adding attribute group as default for devices bound to the driver. The ATTRIBUTE_GROUPS() macro is not used here otherwise the path to the sysfs nodes is no longer compliant with the ABI.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jun 12, 2024References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/0ad011776c057ce881b7fd6d8c79ecd459c087e9 | kernel.org | Mailing ListPatch |
| https://git.kernel.org/stable/c/165376f6b23e9a779850e750fb2eb06622e5a531 | kernel.org | Mailing ListPatch |
| https://git.kernel.org/stable/c/4a22aeac24d0d5f26ba741408e8b5a4be6dc5dc0 | kernel.org | Mailing ListPatch |
| https://git.kernel.org/stable/c/6b989ea1c479533ab8dbfbeb1704c94b1d3320da | kernel.org | |
| https://git.kernel.org/stable/c/9794ffd9d0c39ee070fbd733f862bbe89b28ba33 | kernel.org | |
| https://git.kernel.org/stable/c/f1c5ddaef506e3517dce338c08a60663b1521920 | kernel.org | |
| https://git.kernel.org/stable/c/0ad011776c057ce881b7fd6d8c79ecd459c087e9 | CVE | Mailing ListPatch |
| https://git.kernel.org/stable/c/165376f6b23e9a779850e750fb2eb06622e5a531 | CVE | Mailing ListPatch |
| https://git.kernel.org/stable/c/4a22aeac24d0d5f26ba741408e8b5a4be6dc5dc0 | CVE | Mailing ListPatch |
| https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html | CVE | |
| https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html | CVE |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-476 | NULL Pointer Dereference | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 4.19, < 6.6.24 >= 6.7, < 6.7.12 6.8 rc1 6.8 rc2 6.8 rc3 6.8 rc4 6.8 rc5 6.8 rc6 |
CPE
Remediation
| |
Change History
10 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jun 17, 2026 | CVE Modified | kernel.org |
| Nov 3, 2025 | CVE Modified | CVE |
| Nov 3, 2025 | CVE Modified | CVE |
| Jun 4, 2025 | CVE Modified | kernel.org |
| May 22, 2025 | CVE Modified | kernel.org |
| Mar 5, 2025 | Initial Analysis | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| May 29, 2024 | CVE Modified | kernel.org |
| May 17, 2024 | New CVE Received | kernel.org |