CVE-2024-35943

low-risk
Published 2024-05-19

In the Linux kernel, the following vulnerability has been resolved: pmdomain: ti: Add a null pointer check to the omap_prm_domain_init devm_kasprintf() returns a pointer to dynamically allocated memory which can be NULL upon failure. Ensure the allocation was successful by checking the pointer validity.

Do I need to act?

-
0.02% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
5
CVSS 5.5/10 Medium
LOCAL / LOW complexity

Affected Products (1)

Affected Vendors

Linux

References (11)

Patch https://git.kernel.org/stable/c/04f23510daa40f9010fadf309507564a34ad956f
Patch https://git.kernel.org/stable/c/5d7f58ee08434a33340f75ac7ac5071eea9673b3
Patch https://git.kernel.org/stable/c/984212fa6b4bc6d9ed58f5b0838e8d5af7679ce5
Patch https://git.kernel.org/stable/c/bc08f5ab11b1881b85371f0bd9c9a3d27f65cca8
Patch https://git.kernel.org/stable/c/ce666cecc09c0f92d5f86d89d8068ecfcf723a7e
Patch https://git.kernel.org/stable/c/e65f7eb117e1b44742212d65784236269085e736
Patch https://git.kernel.org/stable/c/04f23510daa40f9010fadf309507564a34ad956f
Patch https://git.kernel.org/stable/c/5d7f58ee08434a33340f75ac7ac5071eea9673b3
Patch https://git.kernel.org/stable/c/ce666cecc09c0f92d5f86d89d8068ecfcf723a7e
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html
23
/ 100
low-risk
Severity 18/34 · Moderate
Exploitability 0/34 · Minimal
Exposure 5/34 · Minimal