Skip to content
Heist/ feed
Back to feed
UnratedFix available

thermal/drivers/qcom/lmh: Check for SCM availability at probe

Type: advisorySources: OSV

In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/qcom/lmh: Check for SCM availability at probe Up until now, the necessary scm availability check has not been performed, leading to possible null pointer dereferences (which did happen for me on RB1). Fix that.

Products
Kernel
Affected versions
Not specified
Fixed versions
5.15.161, 6.1.94, 6.6.34, 6.9.5
CVEs
CVE-2024-39466
Confirmed fixed CVEs
Not specified
Updated in this feed
3 Nov 2026, 23:58 UTC · Revision 1

Source evidence

thermal/drivers/qcom/lmh: Check for SCM availability at probe

core-osv · Original source

Published 25 Jun 2024, 14:25 UTC

In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/qcom/lmh: Check for SCM availability at probe Up until now, the necessary scm availability check has not been performed, leading to possible null pointer dereferences (which did happen for me on RB1). Fix that.

osv:CVE-2024-39466

Kernel

Fixed versions: 5.15.161, 6.1.94, 6.6.34, 6.9.5

Complete source record
{
  "id": "f3c9a7faa8bdc96ca9dde052dd167754f6e5a2903233c89de2c0ee34942250fe",
  "url": "https://osv.dev/vulnerability/CVE-2024-39466",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "thermal/drivers/qcom/lmh: Check for SCM availability at probe",
    "summary": "In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/qcom/lmh: Check for SCM availability at probe Up until now, the necessary scm availability check has not been performed, leading to possible null pointer dereferences (which did happen for me on RB1). Fix that.",
    "evidence": "osv:CVE-2024-39466",
    "products": [
      {
        "name": {
          "value": "Kernel",
          "evidence": "/affected/1/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "5.15.161",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.1.94",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.6.34",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.9.5",
            "evidence": "/affected/1/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "structured": {
      "id": "CVE-2024-39466",
      "aliases": [
        "CVE-2024-39466"
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "type": "GIT",
              "events": [
                {
                  "introduced": "53bca371cdf7addc1e93e1b99285b3d3935685ec"
                },
                {
                  "fixed": "2226b145afa5e13cb60dbe77fb20fb0666a1caf3"
                },
                {
                  "fixed": "560d69c975072974c11434ca6953891e74c1a665"
                },
                {
                  "fixed": "0a47ba94ec3d8f782b33e3d970cfcb769b962464"
                },
                {
                  "fixed": "aa1a0807b4a76b44fb6b58a7e9087cd4b18ab41b"
                },
                {
                  "fixed": "d9d3490c48df572edefc0b64655259eefdcbb9be"
                }
              ]
            }
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-39466.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "5.15.0"
                },
                {
                  "fixed": "5.15.161"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "5.16.0"
                },
                {
                  "fixed": "6.1.94"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.2.0"
                },
                {
                  "fixed": "6.6.34"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.7.0"
                },
                {
                  "fixed": "6.9.5"
                }
              ]
            }
          ],
          "package": {
            "name": "Kernel",
            "ecosystem": "Linux"
          },
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-39466.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:32.645172794Z",
      "provider": "osv",
      "references": [
        "https://git.kernel.org/stable/c/0a47ba94ec3d8f782b33e3d970cfcb769b962464",
        "https://git.kernel.org/stable/c/2226b145afa5e13cb60dbe77fb20fb0666a1caf3",
        "https://git.kernel.org/stable/c/560d69c975072974c11434ca6953891e74c1a665",
        "https://git.kernel.org/stable/c/aa1a0807b4a76b44fb6b58a7e9087cd4b18ab41b",
        "https://git.kernel.org/stable/c/d9d3490c48df572edefc0b64655259eefdcbb9be",
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/39xxx/CVE-2024-39466.json",
        "https://nvd.nist.gov/vuln/detail/CVE-2024-39466",
        "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
      ],
      "provider_metadata": {
        "cna_assigner": "Linux",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/39xxx/CVE-2024-39466.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2024-39466",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "core-osv",
  "document_id": 499302,
  "published_at": "2024-06-25T14:25:04.952+00:00"
}