CVE-2024-57985
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
27/02/2025
Last modified:
27/02/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
firmware: qcom: scm: Cleanup global &#39;__scm&#39; on probe failures<br />
<br />
If SCM driver fails the probe, it should not leave global &#39;__scm&#39;<br />
variable assigned, because external users of this driver will assume the<br />
probe finished successfully. For example TZMEM parts (&#39;__scm->mempool&#39;)<br />
are initialized later in the probe, but users of it (__scm_smc_call())<br />
rely on the &#39;__scm&#39; variable.<br />
<br />
This fixes theoretical NULL pointer exception, triggered via introducing<br />
probe deferral in SCM driver with call trace:<br />
<br />
qcom_tzmem_alloc+0x70/0x1ac (P)<br />
qcom_tzmem_alloc+0x64/0x1ac (L)<br />
qcom_scm_assign_mem+0x78/0x194<br />
qcom_rmtfs_mem_probe+0x2d4/0x38c<br />
platform_probe+0x68/0xc8