CVE-2024-53222NULL Pointer Dereference in Linux

Severity
5.5MEDIUMNVD
OSV8.8OSV5.9
EPSS
0.0%
top 99.05%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedDec 27
Latest updateJul 8

Description

In the Linux kernel, the following vulnerability has been resolved: zram: fix NULL pointer in comp_algorithm_show() LTP reported a NULL pointer dereference as followed: CPU: 7 UID: 0 PID: 5995 Comm: cat Kdump: loaded Not tainted 6.12.0-rc6+ #3 Hardware name: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015 pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : __pi_strcmp+0x24/0x140 lr : zcomp_available_show+0x60/0x100 [zram] sp : ffff800088b93b90 x29: ffff800088b93b90 x28: 00000

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages7 packages

Patches

🔴Vulnerability Details

15
OSV
linux-azure, linux-azure-6.11 vulnerabilities2025-07-08
OSV
linux-lowlatency, linux-lowlatency-hwe-6.11 vulnerabilities2025-07-04
OSV
linux-oem-6.11 vulnerabilities2025-06-30
OSV
linux, linux-aws, linux-gcp, linux-gcp-6.11, linux-hwe-6.11, linux-oracle, linux-raspi, linux-realtime vulnerabilities2025-06-30
OSV
linux-raspi vulnerabilities2025-05-26

📋Vendor Advisories

16
Ubuntu
Linux kernel (Azure) vulnerabilities2025-07-08
Ubuntu
Linux kernel (Low Latency) vulnerabilities2025-07-04
Ubuntu
Linux kernel vulnerabilities2025-06-30
Ubuntu
Linux kernel (OEM) vulnerabilities2025-06-30
Ubuntu
Linux kernel (Raspberry Pi) vulnerabilities2025-05-26