CVE-2024-44936
published 2024-08-26CVE-2024-44936: In the Linux kernel, the following vulnerability has been resolved: power: supply: rt5033: Bring back i2c_set_clientdata Commit 3a93da231c12 ("power: supply…
PriorityP419medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.18%
7.8th percentile
In the Linux kernel, the following vulnerability has been resolved:
power: supply: rt5033: Bring back i2c_set_clientdata
Commit 3a93da231c12 ("power: supply: rt5033: Use devm_power_supply_register() helper")
reworked the driver to use devm. While at it, the i2c_set_clientdata
was dropped along with the remove callback. Unfortunately other parts
of the driver also rely on i2c clientdata so this causes kernel oops.
Bring the call back to fix the driver.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.10.6-1 (forky) | linux 6.10.6-1 (forky) |
| linux | linux | — | — |
| linux | linux | >= 3a93da231c12bb153224bbbdd3d9a83da9e0ba33 < 3c5d0871b0af0184abc6f7f52f8705b39a6251ae | 3c5d0871b0af0184abc6f7f52f8705b39a6251ae |
| linux | linux | >= 3a93da231c12bb153224bbbdd3d9a83da9e0ba33 < d3911f1639e67fc7b12aae0efa5a540976d7443b | d3911f1639e67fc7b12aae0efa5a540976d7443b |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 6.10.6-1 | 6.10.6-1 |
| linux | linux_kernel | >= 0 < 6.10.6-1 | 6.10.6-1 |
| linux | linux_kernel | >= 6.9 < 6.10.5 | 6.10.5 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5LOW
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2024-44936: In the Linux kernel, the following vulnerability has been resolved: power: supply: rt5033: Bring back i2c_set_clientdata Commit 3a93da231c12 ("power:
osv·2024-08-26·CVSS 5.5
CVE-2024-44936 [MEDIUM] CVE-2024-44936: In the Linux kernel, the following vulnerability has been resolved: power: supply: rt5033: Bring back i2c_set_clientdata Commit 3a93da231c12 ("power:
In the Linux kernel, the following vulnerability has been resolved: power: supply: rt5033: Bring back i2c_set_clientdata Commit 3a93da231c12 ("power: supply: rt5033: Use devm_power_supply_register() helper") reworked the driver to use devm. While at it, the i2c_set_clientdata was dropped along with the remove callback. Unfortunately other parts of the driver also rely on i2c clientdata so this causes kernel oops. Bring the call back to fix the driver.
GHSA
GHSA-7846-q6xx-g33p: In the Linux kernel, the following vulnerability has been resolved:
power: supply: rt5033: Bring back i2c_set_clientdata
Commit 3a93da231c12 ("power
ghsa_unreviewed·2024-08-26
CVE-2024-44936 [MEDIUM] GHSA-7846-q6xx-g33p: In the Linux kernel, the following vulnerability has been resolved:
power: supply: rt5033: Bring back i2c_set_clientdata
Commit 3a93da231c12 ("power
In the Linux kernel, the following vulnerability has been resolved:
power: supply: rt5033: Bring back i2c_set_clientdata
Commit 3a93da231c12 ("power: supply: rt5033: Use devm_power_supply_register() helper")
reworked the driver to use devm. While at it, the i2c_set_clientdata
was dropped along with the remove callback. Unfortunately other parts
of the driver also rely on i2c clientdata so this causes kernel oops.
Bring the call back to fix the driver.
Red Hat
kernel: power: supply: rt5033: Bring back i2c_set_clientdata
vendor_redhat·2024-08-26·CVSS 5.5
CVE-2024-44936 [MEDIUM] CWE-119 kernel: power: supply: rt5033: Bring back i2c_set_clientdata
kernel: power: supply: rt5033: Bring back i2c_set_clientdata
In the Linux kernel, the following vulnerability has been resolved:
power: supply: rt5033: Bring back i2c_set_clientdata
Commit 3a93da231c12 ("power: supply: rt5033: Use devm_power_supply_register() helper")
reworked the driver to use devm. While at it, the i2c_set_clientdata
was dropped along with the remove callback. Unfortunately other parts
of the driver also rely on i2c clientdata so this causes kernel oops.
Bring the call back to fix the driver.
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (Red Hat Enterprise Linux 8) - Not affected
Package: kernel-rt (Red Hat Enterp
Debian
CVE-2024-44936: linux - In the Linux kernel, the following vulnerability has been resolved: power: supp...
vendor_debian·2024·CVSS 5.5
CVE-2024-44936 [MEDIUM] CVE-2024-44936: linux - In the Linux kernel, the following vulnerability has been resolved: power: supp...
In the Linux kernel, the following vulnerability has been resolved: power: supply: rt5033: Bring back i2c_set_clientdata Commit 3a93da231c12 ("power: supply: rt5033: Use devm_power_supply_register() helper") reworked the driver to use devm. While at it, the i2c_set_clientdata was dropped along with the remove callback. Unfortunately other parts of the driver also rely on i2c clientdata so this causes kernel oops. Bring the call back to fix the driver.
Scope: local
bookworm: resolved
bullseye: resolved
forky: resolved (fixed in 6.10.6-1)
sid: resolved (fixed in 6.10.6-1)
trixie: resolved (fixed in 6.10.6-1)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-08-26
Published