Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2024-47756 Details

Description

In the Linux kernel, the following vulnerability has been resolved: PCI: keystone: Fix if-statement expression in ks_pcie_quirk() This code accidentally uses && where || was intended. It potentially results in a NULL dereference. Thus, fix the if-statement expression to use the correct condition. [kwilczynski: commit log]

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:5.5 MEDIUMVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://git.kernel.org/stable/c/2171c5cb2fbc3e03af7e8116cd58736c09328655	kernel.org	Patch
https://git.kernel.org/stable/c/23838bef2adb714ec37b2d6141dccf4a3a70bdef	kernel.org	Patch
https://git.kernel.org/stable/c/6188a1c762eb9bbd444f47696eda77a5eae6207a	kernel.org	Patch
https://git.kernel.org/stable/c/72210e52e19a27f615e0b5273d2bf012d0dc318d	kernel.org	Patch
https://git.kernel.org/stable/c/9c9afc3e75069fcfb067727973242cfbf00dd7eb	kernel.org
https://git.kernel.org/stable/c/c289903b7a216df5ea6e1850ddf1b958eea9921d	kernel.org	Patch
https://git.kernel.org/stable/c/dc5aeba07395c8dfa29bb878c8ce4d5180427221	kernel.org	Patch
https://git.kernel.org/stable/c/e85ab507882db165c10a858d7f685a0a38f0312e	kernel.org	Patch
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html	CVE
https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html	CVE

see all 10 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-476	NULL Pointer Dereference	[email protected]

Affected Products

Product	Versions
linux linux kernel	>= 5.4.284, < 5.5 >= 6.1.110, < 6.1.113 >= 6.6.51, < 6.6.54 >= 6.10.10, < 6.10.13 >= 6.11, < 6.11.2
CPE cpe:2.3:o:linux:linux_kernel:::::::: cpe:2.3:o:linux:linux_kernel:5.10.226:::::::* cpe:2.3:o:linux:linux_kernel:5.15.167:::::::* Remediation No remediation found in references.

Change History

8 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	kernel.org
Jun 17, 2026	CVE Modified	CISA-ADP
Nov 3, 2025	CVE Modified	CVE
Nov 3, 2025	CVE Modified	CVE
Nov 8, 2024	CVE Modified	kernel.org
Oct 22, 2024	Reanalysis	[email protected]
Oct 22, 2024	Initial Analysis	[email protected]
Oct 21, 2024	New CVE Received	kernel.org