Linux Kernel Vulnerability in Qualcomm SCM Driver

CVE-2024-57985

Summary

A vulnerability in the Qualcomm SCM driver of the Linux kernel has been identified that could lead to a NULL pointer exception if the driver's probe fails. The driver must clear the global '__scm' variable upon probe failure to prevent external users from mistakenly assuming successful initialization. This vulnerability impacts the proper functioning of memory allocation functions and could result in system instability.

References