CVE-2024-57985
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
27/02/2025
Last modified:
23/10/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
firmware: qcom: scm: Cleanup global &#39;__scm&#39; on probe failures<br />
<br />
If SCM driver fails the probe, it should not leave global &#39;__scm&#39;<br />
variable assigned, because external users of this driver will assume the<br />
probe finished successfully. For example TZMEM parts (&#39;__scm->mempool&#39;)<br />
are initialized later in the probe, but users of it (__scm_smc_call())<br />
rely on the &#39;__scm&#39; variable.<br />
<br />
This fixes theoretical NULL pointer exception, triggered via introducing<br />
probe deferral in SCM driver with call trace:<br />
<br />
qcom_tzmem_alloc+0x70/0x1ac (P)<br />
qcom_tzmem_alloc+0x64/0x1ac (L)<br />
qcom_scm_assign_mem+0x78/0x194<br />
qcom_rmtfs_mem_probe+0x2d4/0x38c<br />
platform_probe+0x68/0xc8
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.11 (including) | 6.12.13 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.13 (including) | 6.13.2 (excluding) |
To consult the complete list of CPE names with products and versions, see this page



