<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugzilla.openanolis.cn/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.6"
          urlbase="https://bugzilla.openanolis.cn/"
          
          maintainer="service@openanolis.org"
>

    <bug>
          <bug_id>8750</bug_id>
          <alias>CVE-2024-24863</alias>
          <creation_ts>2024-04-12 16:40:50 +0000</creation_ts>
          <short_desc>fix a possible null pointer dereference in malidp_mw_connector_reset</short_desc>
          <delta_ts>2024-04-29 09:36:32 +0000</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>5</classification_id>
          <classification>ANCK</classification>
          <product>ANCK 5.10 Dev</product>
          <component>drivers</component>
          <version>5.10.y-16</version>
          <rep_platform>All</rep_platform>
          <op_sys>Linux</op_sys>
          <bug_status>CONFIRMED</bug_status>
          <resolution></resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P3-Medium</priority>
          <bug_severity>S3-normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Shiloong">shile.zhang</reporter>
          <assigned_to name="Shiloong">shile.zhang</assigned_to>
          <cc>qinyuntan</cc>
    
    
    <cc>xlpang</cc>
          
          <qa_contact name="shuming">qingming.su</qa_contact>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>27265</commentid>
    <comment_count>0</comment_count>
    <who name="Shiloong">shile.zhang</who>
    <bug_when>2024-04-12 16:40:50 +0000</bug_when>
    <thetext>on behalf of 刘怀远 &lt;qq810974084@gmail.com&gt;:

在malidp_mw_connector_reset函数中，调用kzalloc函数申请内存的行为不保证成功，同时没有在解引用前进行检查，从而导致空指针解引用。
该模块被编译进内核中，发生空指针解引用会导致kernel panic并挂起系统</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>27266</commentid>
    <comment_count>1</comment_count>
    <who name="Shiloong">shile.zhang</who>
    <bug_when>2024-04-12 16:45:36 +0000</bug_when>
    <thetext>the bugfix has been accepted by the maintainer:
https://lore.kernel.org/all/20240407063053.5481-1-qq810974084@gmail.com/</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>