What’s Vulnerable › Vulnerabilities

CVE-2024-26770: HID: nvidia-shield: Add missing null pointer checks to LED initialization

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-04-03 · updated 2026-06-17
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: HID: nvidia-shield: Add missing null pointer checks to LED initialization devm_kasprintf() returns a pointer to dynamically allocated memory which can be NULL upon failure. Ensure the allocation was successful by checking the pointer validity. [jkosina@suse.com: tweak changelog a bit]

Affected products

• Linux kernel: before 6.6.19; from 6.7 before 6.7.7; 6.8-rc1, 6.8-rc2 — fixed in 6.6.19, 6.7.7

How to fix

Upgrade to a fixed version: Linux kernel 6.6.19, 6.7.7. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/83527a13740f57b45f162e3af4c7db4b88521100
• https://git.kernel.org/stable/c/b6eda11c44dc89a681e1c105f0f4660e69b1e183
• https://git.kernel.org/stable/c/e71cc4a1e584293deafff1a7dea614b0210d0443
• https://git.kernel.org/stable/c/83527a13740f57b45f162e3af4c7db4b88521100
• https://git.kernel.org/stable/c/b6eda11c44dc89a681e1c105f0f4660e69b1e183
• https://git.kernel.org/stable/c/e71cc4a1e584293deafff1a7dea614b0210d0443

Get alerted when CVE-2024-26770 or the next vulnerability affects your stack