CVE-2024-50300 (GCVE-0-2024-50300)
Vulnerability from cvelistv5
Published
2024-11-19 01:30
Modified
2026-08-05 11:43
Severity ?
7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Summary
In the Linux kernel, the following vulnerability has been resolved: regulator: rtq2208: Fix uninitialized use of regulator_config Fix rtq2208 driver uninitialized use to cause kernel error.
References
Impacted products
Vendor Product Version
Linux Linux Version: 85a11f55621a0c18b22b43ab4219450ac1d19386
Version: 85a11f55621a0c18b22b43ab4219450ac1d19386
Version: 85a11f55621a0c18b22b43ab4219450ac1d19386
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-50300",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-10-01T20:13:54.439730Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-908",
                "description": "CWE-908 Use of Uninitialized Resource",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-10-01T20:17:19.962Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/regulator/rtq2208-regulator.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "9b7c0405af667857b3ad24a7ef6723f5475a9e43",
              "status": "affected",
              "version": "85a11f55621a0c18b22b43ab4219450ac1d19386",
              "versionType": "git"
            },
            {
              "lessThan": "64fbab934ae59be9caffc80a75450984b1e108e0",
              "status": "affected",
              "version": "85a11f55621a0c18b22b43ab4219450ac1d19386",
              "versionType": "git"
            },
            {
              "lessThan": "2feb023110843acce790e9089e72e9a9503d9fa5",
              "status": "affected",
              "version": "85a11f55621a0c18b22b43ab4219450ac1d19386",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/regulator/rtq2208-regulator.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.6"
            },
            {
              "lessThan": "6.6",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.61",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.11.*",
              "status": "unaffected",
              "version": "6.11.8",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.12",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.61",
                  "versionStartIncluding": "6.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.11.8",
                  "versionStartIncluding": "6.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12",
                  "versionStartIncluding": "6.6",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nregulator: rtq2208: Fix uninitialized use of regulator_config\n\nFix rtq2208 driver uninitialized use to cause kernel error."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The defect lives in `rtq2208_probe()`, an I2C client probe routine reached only through the local device/driver model (boot-time DT match, module load, or sysfs bind), with no network- or adjacent-facing consumer of this code.\nAC:L - The uninitialized `cfg` is consumed unconditionally on every probe with no race window, no timing dependency, and no need to defeat any layout the attacker cannot influence \u2014 the reporter observed the resulting kernel error deterministically on affected hardware.\nPR:L - No credential check guards the path; an unprivileged local context on an affected board is exposed to the corrupted regulator state, and the resulting wild-pointer-backed constraints are readable through unprivileged `/sys/class/regulator/*` attributes.\nUI:N - Probe runs automatically when the RTQ2208 is matched, so no action by any other user or victim is required for the uninitialized config to be consumed.\nS:U - The corruption stays inside the kernel\u0027s own memory and security authority \u2014 no hypervisor, IOMMU, or sandbox boundary is crossed.\nC:H - `rdev-\u003econstraints` is `kmemdup()`ed from the uninitialized `init_data` pointer and its fields (including a `name` char pointer) are exported via world-readable regulator sysfs attributes, and the wild `rdev-\u003eregmap` makes register reads target arbitrary kernel addresses, yielding kernel memory disclosure.\nI:H - `init_data-\u003eregulator_init(rdev-\u003ereg_data)` is an indirect call through a function pointer sourced from uninitialized stack memory, and the garbage `regmap`/`ena_gpiod` drive `regmap_update_bits()` writes and `of_node_get()` refcount increments at attacker-uncontrolled kernel addresses \u2014 a control-flow hijack and arbitrary-write primitive.\nA:H - Dereferencing the uninitialized `regmap`, `init_data`, and `ena_gpiod` pointers oopses the kernel during probe, which on affected boards means a panic in the power-management path and a system that fails to boot."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T11:43:13.349Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/9b7c0405af667857b3ad24a7ef6723f5475a9e43"
        },
        {
          "url": "https://git.kernel.org/stable/c/64fbab934ae59be9caffc80a75450984b1e108e0"
        },
        {
          "url": "https://git.kernel.org/stable/c/2feb023110843acce790e9089e72e9a9503d9fa5"
        }
      ],
      "title": "regulator: rtq2208: Fix uninitialized use of regulator_config",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-50300",
    "datePublished": "2024-11-19T01:30:48.650Z",
    "dateReserved": "2024-10-21T19:36:19.987Z",
    "dateUpdated": "2026-08-05T11:43:13.349Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 5.5, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"NONE\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-50300\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-10-01T20:13:54.439730Z\"}}}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-908\", \"description\": \"CWE-908 Use of Uninitialized Resource\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-10-01T15:28:03.459Z\"}}], \"cna\": {\"title\": \"regulator: rtq2208: Fix uninitialized use of regulator_config\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"85a11f55621a0c18b22b43ab4219450ac1d19386\", \"lessThan\": \"9b7c0405af667857b3ad24a7ef6723f5475a9e43\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"85a11f55621a0c18b22b43ab4219450ac1d19386\", \"lessThan\": \"64fbab934ae59be9caffc80a75450984b1e108e0\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"85a11f55621a0c18b22b43ab4219450ac1d19386\", \"lessThan\": \"2feb023110843acce790e9089e72e9a9503d9fa5\", \"versionType\": \"git\"}], \"programFiles\": [\"drivers/regulator/rtq2208-regulator.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.6\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"6.6\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"6.6.61\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.6.*\"}, {\"status\": \"unaffected\", \"version\": \"6.11.8\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.11.*\"}, {\"status\": \"unaffected\", \"version\": \"6.12\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"drivers/regulator/rtq2208-regulator.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/9b7c0405af667857b3ad24a7ef6723f5475a9e43\"}, {\"url\": \"https://git.kernel.org/stable/c/64fbab934ae59be9caffc80a75450984b1e108e0\"}, {\"url\": \"https://git.kernel.org/stable/c/2feb023110843acce790e9089e72e9a9503d9fa5\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nregulator: rtq2208: Fix uninitialized use of regulator_config\\n\\nFix rtq2208 driver uninitialized use to cause kernel error.\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.6.61\", \"versionStartIncluding\": \"6.6\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.11.8\", \"versionStartIncluding\": \"6.6\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.12\", \"versionStartIncluding\": \"6.6\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2026-05-11T20:49:29.011Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-50300\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-05-11T20:49:29.011Z\", \"dateReserved\": \"2024-10-21T19:36:19.987Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-11-19T01:30:48.650Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.