Skip to content
5.3 Medium

CVE-2024-24856 The memory allocation function ACPI_ALLOCATE_ZEROED does not guarantee a successful allocation, but the subsequent…

Description

The memory allocation function ACPI_ALLOCATE_ZEROED does not guarantee a successful allocation, but the subsequent code directly dereferences the pointer that receives it, which may lead to null pointer dereference. To fix this issue, a null pointer check should be added. If it is null, return exception code AE_NO_MEMORY.

Affected products and versions

Product Affected versions Fixed in
Anolis OS 4.4 4.4 → < 6.9 6.9
anolis_os 4.4 4.4 → < 6.9 6.9

References

Timeline

  1. Published
  2. Last modified
The 2 CVEs of Anolis OS →
Track this CVE