Description

In the Linux kernel, the following vulnerability has been resolved: PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs() If IORESOURCE_MEM is not provided in Device Tree due to any error, resource_list_first_type() will return NULL and pci_parse_request_of_pci_ranges() will just emit a warning. This will cause a NULL pointer dereference. Fix this bug by adding NULL return check. Found by Linux Verification Center (linuxtesting.org) with SVACE.

INFO

Published Date :

2024-08-17T09:21:43.843Z

Last Modified :

2025-11-03T22:05:06.437Z

Source :

Linux
AFFECTED PRODUCTS

The following products are affected by CVE-2024-43823 vulnerability.

Vendors Products
Linux
  • Linux Kernel
Redhat
  • Enterprise Linux
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-43823.

URL Resource
https://git.kernel.org/stable/c/0a6f1b5fe8ef8268aaa069035639968ceeea0a23 cve-icon cve-icon
https://git.kernel.org/stable/c/a231707a91f323af1e5d9f1722055ec2fc1c7775 cve-icon cve-icon
https://git.kernel.org/stable/c/bbba48ad67c53feea05936ea1e029dcca8057506 cve-icon cve-icon
https://git.kernel.org/stable/c/dbcdd1863ba2ec9b76ec131df25d797709e05597 cve-icon cve-icon
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html cve-icon
https://lore.kernel.org/linux-cve-announce/2024081725-CVE-2024-43823-4bdd@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-43823 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-43823 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact