Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2024-53205 Details

Description

In the Linux kernel, the following vulnerability has been resolved: phy: realtek: usb: fix NULL deref in rtk_usb2phy_probe In rtk_usb2phy_probe() devm_kzalloc() may return NULL but this returned value is not checked.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:5.5 MEDIUMVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://git.kernel.org/stable/c/04e3e9188291a183b27306ddb833722c0d083d6a kernel.orgPatch
https://git.kernel.org/stable/c/0b398b6b6c94315fd2ce3658e3cee96539dbd7b7 kernel.orgPatch
https://git.kernel.org/stable/c/7a784bcdd7e54f0599da3b2360e472238412623e kernel.org
https://git.kernel.org/stable/c/7e2cde1813418b39b5e95d86e10d6701dccf18af kernel.org
https://git.kernel.org/stable/c/fb83c9a08324e37f321ffb400809aa4310387d65 kernel.orgPatch

Weakness Enumeration

CWE-IDCWE NameSource
CWE-476NULL Pointer Dereference[email protected]

Affected Products

ProductVersions
linux linux kernel
>= 6.6, < 6.11.11
>= 6.12, < 6.12.2

CPE

  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

4 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2024-53205
NVD Published Date:
Dec 27, 2024
NVD Last Modified:
Jun 17, 2026
Source:
kernel.org
CVE-2024-53205 Details - Not Deferred