What’s Vulnerable › Vulnerabilities

CVE-2024-35984: i2c: smbus: fix NULL function pointer dereference

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-05-20 · updated 2026-10-15
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: i2c: smbus: fix NULL function pointer dereference Baruch reported an OOPS when using the designware controller as target only. Target-only modes break the assumption of one transfer function always being available. Fix this by always checking the pointer in __i2c_transfer. [wsa: dropped the simplification in core-smbus to avoid theoretical regressions]

Affected products

• Linux kernel: from 3.19 before 4.19.313; from 4.20 before 5.4.275; from 5.5 before 5.10.216; from 5.11 before 5.15.158; from 5.16 before 6.1.90; from 6.2 before 6.6.30 — fixed in 4.19.313, 5.10.216, 5.15.158, 5.4.275, 6.1.90, 6.6.30

How to fix

Upgrade to a fixed version: Linux kernel 4.19.313, 5.10.216, 5.15.158, 5.4.275. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/357c64ef1ef39b1e7cd91ab6bdd304d043702c83
• https://git.kernel.org/stable/c/40f1d79f07b49c8a64a861706e5163f2db4bd95d
• https://git.kernel.org/stable/c/4e75e222d397c6752b229ed72fc4644c8c36ecde
• https://git.kernel.org/stable/c/5a09eae9a7db597fe0c1fc91636205b4a25d2620
• https://git.kernel.org/stable/c/5fd72404587d7db4acb2d241fd8c387afb0a7aec
• https://git.kernel.org/stable/c/91811a31b68d3765b3065f4bb6d7d6d84a7cfc9f
• https://git.kernel.org/stable/c/ad3c3ac7a03be3697114f781193dd3e9d97e6e23
• https://git.kernel.org/stable/c/e3425674ff68dc521c57c6eabad0cbd20a027d85
• https://git.kernel.org/stable/c/357c64ef1ef39b1e7cd91ab6bdd304d043702c83
• https://git.kernel.org/stable/c/40f1d79f07b49c8a64a861706e5163f2db4bd95d
• https://git.kernel.org/stable/c/4e75e222d397c6752b229ed72fc4644c8c36ecde
• https://git.kernel.org/stable/c/5a09eae9a7db597fe0c1fc91636205b4a25d2620

Get alerted when CVE-2024-35984 or the next vulnerability affects your stack