CVE-2024-24856
Medium
Description
The memory allocation function ACPI_ALLOCATE_ZEROED does not guarantee a successful allocation, but the subsequent code directly dereferences the pointer that receives it, which may lead to null pointer dereference. To fix this issue, a null pointer check should be added. If it is null, return exception code AE_NO_MEMORY.
SeverityMedium
CVSS5.3
Exploit probability—
ProductAnolis OS
PublishedApr 17, 2024
First seenApr 17, 2024
Weakness typeCWE-476NULL pointer dereference
How to fix
Update
- OpenAnolis Anolis OSv6.9 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| OpenAnolis Anolis OS | v4.4 ≤ v < v6.9 | v6.9 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.