CVE-2024-35984

Summary

CVE-2024-35984 is a vulnerability affecting the Linux kernel's i2c subsystem. This issue was reported by Baruch and involved a NULL function pointer dereference. The problem occurs during the use of the designware controller as a target, which can lead to an OOPS (Out of Memory) error. In the i2c transfer process, the assumption that one transfer function is always available is broken in target-only modes. The vulnerability has been resolved by implementing a check for the pointer in __i2c_transfer, and the core-smbus simplification has been kept to prevent potential theoretical regressions.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.