]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core-contrib.git/commit
acpica: fix CVE-2024-24856
authorChangqing Li <changqing.li@windriver.com>
Mon, 25 Nov 2024 04:55:45 +0000 (12:55 +0800)
committerSteve Sakoman <steve@sakoman.com>
Mon, 25 Nov 2024 14:04:55 +0000 (06:04 -0800)
commit5c590ccd1973d343f47e7b7171691400490dfc1a
treef187fff4c6df4c11bbd22354242e7ee1dafc896f
parentec77cfe12f0790c7e3cf2d9bf00e47b4c653997c
acpica: fix CVE-2024-24856

The memory allocation function ACPI_ALLOCATE_ZEROED does not guarantee a
successful allocation, but the subsequent code directly dereferences the
pointer that receives it, which may lead to null pointer dereference. To
fix this issue, a null pointer check should be added. If it is null,
return exception code AE_NO_MEMORY.

Refer: https://nvd.nist.gov/vuln/detail/CVE-2024-24856

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
meta/recipes-extended/acpica/acpica_20240322.bb
meta/recipes-extended/acpica/files/CVE-2024-24856.patch [new file with mode: 0644]