Threats tagged 'ghsa-g223-xxpm-2vv4'

CVE-2024-43823 is a vulnerability in the Linux kernel's PCI keystone driver where a NULL pointer dereference can occur if the IORESOURCE_MEM is missing in the Device Tree due to an error. This happens because the function pci_parse_request_of_pci_ranges() only emits a warning when resource_list_first_type() returns NULL, leading to a NULL pointer dereference. The issue has been fixed by adding a NULL return check in the affected function.