Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2024-38546 Details

Description

In the Linux kernel, the following vulnerability has been resolved: drm: vc4: Fix possible null pointer dereference In vc4_hdmi_audio_init() of_get_address() may return NULL which is later dereferenced. Fix this bug by adding NULL check. Found by Linux Verification Center (linuxtesting.org) with SVACE.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:5.5 MEDIUMVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://git.kernel.org/stable/c/2a345fe928c21de6f3c3c7230ff509d715153a31 kernel.orgPatch
https://git.kernel.org/stable/c/2d9adecc88ab678785b581ab021f039372c324cb kernel.orgPatch
https://git.kernel.org/stable/c/42c22b63056cea259d5313bf138a834840af85a5 kernel.orgPatch
https://git.kernel.org/stable/c/6cf1874aec42058a5ad621a23b5b2f248def0e96 kernel.orgPatch
https://git.kernel.org/stable/c/80431ea3634efb47a3004305d76486db9dd8ed49 kernel.orgPatch

see all 14 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-476NULL Pointer Dereference[email protected]

Affected Products

ProductVersions
linux linux kernel
>= 4.12, < 5.10.219
>= 5.11, < 5.15.161
>= 5.16, < 6.1.93
>= 6.2, < 6.6.33
>= 6.7, < 6.8.12

CPE

  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

5 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2024-38546
NVD Published Date:
Jun 19, 2024
NVD Last Modified:
Jun 17, 2026
Source:
kernel.org
CVE-2024-38546 Details - Not Deferred