VULNERABILITY INTELLIGENCE

CVE-2024-45028

CVSS score5.5 MEDIUM
EPSS probability0.25%
CISA KEVNot currently listed
Published2024-09-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Description

In the Linux kernel, the following vulnerability has been resolved: mmc: mmc_test: Fix NULL dereference on allocation failure If the "test->highmem = alloc_pages()" allocation fails then calling __free_pages(test->highmem) will result in a NULL dereference. Also change the error code to -ENOMEM instead of returning success.

Weakness classification

  • CWE-476: NULL Pointer Dereference

Primary references