Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.5
CVE-2024-50069: Linux kernel Apple pin control may crash on memory allocation failure
CVE-2024-50069 · published 2 years ago
Summary
The Linux kernel code that handles Apple device pins could try to use memory that wasn’t successfully allocated, which can cause the system to stop working. This issue was found during a code review and has been fixed by adding a check for the allocation result. Ensure your Linux kernel packages are updated to the latest version to apply the fix.
What to do
- Update debian linux to version 6.1.115-1.
- Update debian linux to version 6.11.5-1.
- Update canonical linux-aws-6.8 to version 6.8.0-1027.29~22.04.1.
- Update canonical linux-azure-6.8 to version 6.8.0-1025.30~22.04.1.
- Update canonical linux-gcp-6.8 to version 6.8.0-1026.28~22.04.1.
- Update canonical linux-hwe-6.8 to version 6.8.0-57.59~22.04.1.
- Update canonical linux-ibm-6.8 to version 6.8.0-1023.23~22.04.1.
- Update canonical linux-lowlatency-hwe-6.8 to version 6.8.0-56.58.1~22.04.1.
- Update canonical linux-nvidia-6.8 to version 6.8.0-1024.27~22.04.1.
- Update canonical linux-oracle-6.8 to version 6.8.0-1022.23~22.04.1.
- Update canonical linux-riscv-6.8 to version 6.8.0-56.58.1~22.04.1.
- Update canonical linux-realtime-6.8 to version 6.8.1-1018.19~22.04.1.
- Update canonical linux to version 6.8.0-56.58.
- Update canonical linux-aws to version 6.8.0-1025.27.
- Update canonical linux-azure to version 6.8.0-1025.30.
- Update canonical linux-azure-6.11 to version 6.11.0-1012.12~24.04.1.
- Update canonical linux-azure-nvidia to version 6.8.0-1014.15.
- Update canonical linux-gcp to version 6.8.0-1026.28.
- Update canonical linux-gcp-6.11 to version 6.11.0-1011.11~24.04.1.
- Update canonical linux-gke to version 6.8.0-1021.25.
- Update canonical linux-gkeop to version 6.8.0-1008.10.
- Update canonical linux-ibm to version 6.8.0-1022.22.
- Update canonical linux-lowlatency to version 6.8.0-56.58.1.
- Update canonical linux-nvidia to version 6.8.0-1024.27.
- Update canonical linux-nvidia-6.11 to version 6.11.0-1007.7.
- Update canonical linux-nvidia-lowlatency to version 6.8.0-1024.27.1.
- Update canonical linux-nvidia-tegra to version 6.8.0-1004.4.
- Update canonical linux-oem-6.11 to version 6.11.0-1015.15.
- Update canonical linux-oem-6.8 to version 6.8.0-1024.24.
- Update canonical linux-oracle to version 6.8.0-1022.23.
- Update canonical linux-raspi to version 6.8.0-1028.32.
- Update canonical linux-riscv to version 6.8.0-56.58.1.
- Update canonical linux-xilinx to version 6.8.0-1017.18.
- Update canonical linux-raspi-realtime to version 6.8.0-2023.24.
- Update canonical linux-realtime to version 6.8.1-1018.19.
- Update canonical linux-fips to version 6.8.0-78.78+fips1.
- Update linux kernel to version 6.11.5.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | linux | linux_kernel |
>= 5.16, < 6.1.114 >= 6.2, < 6.6.58 >= 6.7, < 6.11.5 6.12 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Debian:12 | debian | linux |
< 6.1.115-1 Fix: upgrade to 6.1.115-1
|
| Debian:13 | debian | linux |
< 6.11.5-1 Fix: upgrade to 6.11.5-1
|
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.8 |
< 6.8.0-1027.29~22.04.1 Fix: upgrade to 6.8.0-1027.29~22.04.1
|
Showing 50 of 113. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.8 |
< 6.8.0-1025.30~22.04.1 Fix: upgrade to 6.8.0-1025.30~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.8 |
< 6.8.0-1026.28~22.04.1 Fix: upgrade to 6.8.0-1026.28~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.8 |
< 6.8.0-57.59~22.04.1 Fix: upgrade to 6.8.0-57.59~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-ibm-6.8 |
< 6.8.0-1023.23~22.04.1 Fix: upgrade to 6.8.0-1023.23~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.8 |
< 6.8.0-56.58.1~22.04.1 Fix: upgrade to 6.8.0-56.58.1~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.8 |
< 6.8.0-1024.27~22.04.1 Fix: upgrade to 6.8.0-1024.27~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.8 |
< 6.8.0-1022.23~22.04.1 Fix: upgrade to 6.8.0-1022.23~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.8 |
< 6.8.0-56.58.1~22.04.1 Fix: upgrade to 6.8.0-56.58.1~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime-6.8 |
< 6.8.1-1018.19~22.04.1 Fix: upgrade to 6.8.1-1018.19~22.04.1
|
| Ubuntu:24.04:LTS | canonical | linux |
< 6.8.0-56.58 Fix: upgrade to 6.8.0-56.58
|
| Ubuntu:24.04:LTS | canonical | linux-aws |
< 6.8.0-1025.27 Fix: upgrade to 6.8.0-1025.27
|
| Ubuntu:24.04:LTS | canonical | linux-azure |
< 6.8.0-1025.30 Fix: upgrade to 6.8.0-1025.30
|
| Ubuntu:24.04:LTS | canonical | linux-azure-6.11 |
< 6.11.0-1012.12~24.04.1 Fix: upgrade to 6.11.0-1012.12~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia |
< 6.8.0-1014.15 Fix: upgrade to 6.8.0-1014.15
|
| Ubuntu:24.04:LTS | canonical | linux-gcp |
< 6.8.0-1026.28 Fix: upgrade to 6.8.0-1026.28
|
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.11 |
< 6.11.0-1011.11~24.04.1 Fix: upgrade to 6.11.0-1011.11~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-gke |
< 6.8.0-1021.25 Fix: upgrade to 6.8.0-1021.25
|
| Ubuntu:24.04:LTS | canonical | linux-gkeop |
< 6.8.0-1008.10 Fix: upgrade to 6.8.0-1008.10
|
| Ubuntu:24.04:LTS | canonical | linux-ibm |
< 6.8.0-1022.22 Fix: upgrade to 6.8.0-1022.22
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency |
< 6.8.0-56.58.1 Fix: upgrade to 6.8.0-56.58.1
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia |
< 6.8.0-1024.27 Fix: upgrade to 6.8.0-1024.27
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.11 |
< 6.11.0-1007.7 Fix: upgrade to 6.11.0-1007.7
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-lowlatency |
< 6.8.0-1024.27.1 Fix: upgrade to 6.8.0-1024.27.1
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-tegra |
< 6.8.0-1004.4 Fix: upgrade to 6.8.0-1004.4
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.11 |
< 6.11.0-1015.15 Fix: upgrade to 6.11.0-1015.15
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 |
< 6.8.0-1024.24 Fix: upgrade to 6.8.0-1024.24
|
| Ubuntu:24.04:LTS | canonical | linux-oracle |
< 6.8.0-1022.23 Fix: upgrade to 6.8.0-1022.23
|
| Ubuntu:24.04:LTS | canonical | linux-raspi |
< 6.8.0-1028.32 Fix: upgrade to 6.8.0-1028.32
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv |
< 6.8.0-56.58.1 Fix: upgrade to 6.8.0-56.58.1
|
| Ubuntu:24.04:LTS | canonical | linux-xilinx |
< 6.8.0-1017.18 Fix: upgrade to 6.8.0-1017.18
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-raspi-realtime |
< 6.8.0-2023.24 Fix: upgrade to 6.8.0-2023.24
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime |
< 6.8.1-1018.19 Fix: upgrade to 6.8.1-1018.19
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-fips |
< 6.8.0-78.78+fips1 Fix: upgrade to 6.8.0-78.78+fips1
|
| Linux | linux | kernel |
>= 6.7.0, < 6.11.5 Fix: upgrade to 6.11.5
|
Original advisory text
pinctrl: apple: check devm_kasprintf() returned value
In the Linux kernel, the following vulnerability has been resolved: pinctrl: apple: check devm_kasprintf() returned value devm_kasprintf() can return a NULL pointer on failure but this returned value is not checked. Fix this lack and check the returned value. Found by code review.
References
- https://git.kernel.org/stable/c/0a4d4dbef622ac8796a6665e0080da2685f9220a URL
- https://git.kernel.org/stable/c/4d2296fb7c80fdc9925d29a8e85d617cad08731a URL
- https://git.kernel.org/stable/c/fad940e2dd789155f99ecafa71a7baf6f96530bc URL
- https://ubuntu.com/security/CVE-2024-50069 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2024-50069 Third Party Advisory
- https://git.kernel.org/linus/665a58fe663ac7a9ea618dc0b29881649324b116 Third Party Advisory
- https://ubuntu.com/security/notices/USN-7276-1 Vendor Advisory
- https://git.kernel.org/stable/c/665a58fe663ac7a9ea618dc0b29881649324b116 URL
- https://ubuntu.com/security/notices/USN-7277-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7310-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7383-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7384-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7385-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7386-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7383-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7384-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7403-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7451-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7468-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7523-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7524-1 Vendor Advisory
- https://security-tracker.debian.org/tracker/CVE-2024-50069 Vendor Advisory
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html URL
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/50xxx/CVE-2024-50069... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-50069 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-476NULL Pointer Dereference
Timeline
Published29 Oct 2024
Updated2 Nov 2026
First seen7 Mar 2026
Sources
CVE-2024-50069 · NVD
DEBIAN-CVE-2024-50069 · OSV
UBUNTU-CVE-2024-50069 · OSV
CVE-2024-50069 · OSV
Track software like this
Free during beta