https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 08:49:08 +0000 https://vulnerability.circl.lu/vuln/cve-2024-57985 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>firmware: qcom: scm: Cleanup global &#39;__scm&#39; on probe failures</p> <p>If SCM driver fails the probe, it should not leave global &#39;__scm&#39; variable assigned, because external users of this driver will assume the probe finished successfully. For example TZMEM parts (&#39;__scm-&gt;mempool&#39;) are initialized later in the probe, but users of it (__scm_smc_call()) rely on the &#39;__scm&#39; variable.</p> <p>This fixes theoretical NULL pointer exception, triggered via introducing probe deferral in SCM driver with call trace:</p> <p>qcom_tzmem_alloc+0x70/0x1ac (P) qcom_tzmem_alloc+0x64/0x1ac (L) qcom_scm_assign_mem+0x78/0x194 qcom_rmtfs_mem_probe+0x2d4/0x38c platform_probe+0x68/0xc8</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>firmware: qcom: scm: Cleanup global &#39;__scm&#39; on probe failures</p> <p>If SCM driver fails the probe, it should not leave global &#39;__scm&#39; variable assigned, because external users of this driver will assume the probe finished successfully. For example TZMEM parts (&#39;__scm-&gt;mempool&#39;) are initialized later in the probe, but users of it (__scm_smc_call()) rely on the &#39;__scm&#39; variable.</p> <p>This fixes theoretical NULL pointer exception, triggered via introducing probe deferral in SCM driver with call trace:</p> <p>qcom_tzmem_alloc+0x70/0x1ac (P) qcom_tzmem_alloc+0x64/0x1ac (L) qcom_scm_assign_mem+0x78/0x194 qcom_rmtfs_mem_probe+0x2d4/0x38c platform_probe+0x68/0xc8</p> https://vulnerability.circl.lu/vuln/cve-2024-57985