5.5

CVE-2024-47756: linux NULL Pointer Dereference

CVSS: 5.5v3.1MediumModified
AliasesUBUNTU-CVE-2024-47756DEBIAN-CVE-2024-47756
Published 21-10-2024Last modified 23-05-2026
Open JSON

Vulnerability summary

CVE-2024-47756 is a medium (CVSS 5.5) NULL Pointer Dereference vulnerability in linux. EPSS estimates a 0.22% chance of exploitation in the next 30 days, higher than 11.6% of scored vulnerabilities.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (NVD)
EPSS score
0.22%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 48 · Related 46
DLA-4008-1DLA-4075-1MGASA-2024-0344MGASA-2024-0345OPENSUSE-SU-2024:14500-1OPENSUSE-SU-2025:14705-1

Timeline

  1. 21-10-2024
    PublishedVulnerability first disclosed.
  2. 23-05-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: PCI: keystone: Fix if-statement expression in ks_pcie_quirk() This code accidentally uses && where || was intended. It potentially results in a NULL dereference. Thus, fix the if-statement expression to use the correct condition. [kwilczynski: commit log]

CVSS metrics

3 scores · 3 sources · 1 version

EPSS trend

Probability

0.22%

Chance of exploitation in the next 30 days

Percentile

12%

Versus all other CVEs

30-day change

0.00 pp

From 0.22% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.22%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu125 products
  • linux< 5.4.0-208.228 | < 5.15.0-127.137 | < 6.8.0-54.56
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws< 5.4.0-1140.150 | < 5.15.0-1073.79 | < 6.8.0-1023.25
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ cfb006e185f64edbbdf7869eac352442bc76b8f6, < 9c9afc3e75069fcfb067727973242cfbf00dd7eb | ≥ ebbdbbc580c1695dec283d0ba6448729dc993246, < c289903b7a216df5ea6e1850ddf1b958eea9921d | ≥ 135843c351c08df72bdd4b4ebea53c8052a76881, < dc5aeba07395c8dfa29bb878c8ce4d5180427221 | ≥ af218c803fe298ddf00abef331aa526b20d7ea61, < 23838bef2adb714ec37b2d6141dccf4a3a70bdef | ≥ 576d0fb6f8d4bd4695e70eee173a1b9c7bae9572, < e85ab507882db165c10a858d7f685a0a38f0312e | ≥ dd47051c76c8acd8cb983f01b4d1265da29cb66a, < 72210e52e19a27f615e0b5273d2bf012d0dc318d | ≥ 86f271f22bbb6391410a07e08d6ca3757fda01fa, < 2171c5cb2fbc3e03af7e8116cd58736c09328655 | ≥ 86f271f22bbb6391410a07e08d6ca3757fda01fa, < 6188a1c762eb9bbd444f47696eda77a5eae6207a | ≥ 5.4.284, < 5.4.285 | ≥ 5.10.226, < 5.10.227 | ≥ 5.15.167, < 5.15.168 | ≥ 6.1.110, < 6.1.113 | ≥ 6.6.51, < 6.6.54 | ≥ 6.10.10, < 6.10.13 | 6.11
  • linux_kernel≥ 5.4.284, < 5.5 | ≥ 6.1.110, < 6.1.113 | ≥ 6.6.51, < 6.6.54 | ≥ 6.10.10, < 6.10.13 | ≥ 6.11, < 6.11.2 | 5.10.226 | 5.15.167
Debian1 product
  • linux< 6.1.115-1 | < 6.11.2-1

3 vendors · 128 products

References

48 links
Show all 48 references