Back
CVE-2024-47756PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- 5.5MediumCVSS base score
- 0.22%Exploitation in 30 daysEPSS · top 87% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: PCI: keystone: Fix if-statement expression in ks_pcie_quirk() This code accidentally uses && where || was intended. It potentially results in a NULL dereference. Thus, fix the if-statement expression to use the correct condition. [kwilczynski: commit log]
Timeline
ID reserved
By Linux
- 21 days later
· 21 days later
Published
- 19 months later
· 19 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Modified | 3.1 | Medium5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.22% · top 87% of all CVEs (15 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.5.
Affected products
- affected cfb006e185f64edbbdf7869eac352442bc76b8f6 – < 9c9afc3e75069fcfb067727973242cfbf00dd7eb
- affected ebbdbbc580c1695dec283d0ba6448729dc993246 – < c289903b7a216df5ea6e1850ddf1b958eea9921d
- affected 135843c351c08df72bdd4b4ebea53c8052a76881 – < dc5aeba07395c8dfa29bb878c8ce4d5180427221
- affected af218c803fe298ddf00abef331aa526b20d7ea61 – < 23838bef2adb714ec37b2d6141dccf4a3a70bdef
- affected 576d0fb6f8d4bd4695e70eee173a1b9c7bae9572 – < e85ab507882db165c10a858d7f685a0a38f0312e
- affected dd47051c76c8acd8cb983f01b4d1265da29cb66a – < 72210e52e19a27f615e0b5273d2bf012d0dc318d
- affected 86f271f22bbb6391410a07e08d6ca3757fda01fa – < 2171c5cb2fbc3e03af7e8116cd58736c09328655
- affected 86f271f22bbb6391410a07e08d6ca3757fda01fa – < 6188a1c762eb9bbd444f47696eda77a5eae6207a
- affected 5.4.284 – < 5.4.285
- affected 5.10.226 – < 5.10.227
- affected 5.15.167 – < 5.15.168
- affected 6.1.110 – < 6.1.113
- affected 6.6.51 – < 6.6.54
- affected 6.10.10 – < 6.10.13
- affected 6.11
- unaffected < 6.11
- unaffected 5.4.285 – ≤ 5.4.*
- unaffected 5.10.227 – ≤ 5.10.*
- unaffected 5.15.168 – ≤ 5.15.*
- unaffected 6.1.113 – ≤ 6.1.*
- unaffected 6.6.54 – ≤ 6.6.*
- unaffected 6.10.13 – ≤ 6.10.*
- unaffected 6.11.2 – ≤ 6.11.*
- unaffected 6.12 – ≤ *
References
References10
- https://git.kernel.org/stable/c/9c9afc3e75069fcfb067727973242cfbf00dd7eb (opens in a new tab)
- https://git.kernel.org/stable/c/c289903b7a216df5ea6e1850ddf1b958eea9921d (opens in a new tab)
- https://git.kernel.org/stable/c/dc5aeba07395c8dfa29bb878c8ce4d5180427221 (opens in a new tab)
- https://git.kernel.org/stable/c/23838bef2adb714ec37b2d6141dccf4a3a70bdef (opens in a new tab)
- https://git.kernel.org/stable/c/e85ab507882db165c10a858d7f685a0a38f0312e (opens in a new tab)
- https://git.kernel.org/stable/c/72210e52e19a27f615e0b5273d2bf012d0dc318d (opens in a new tab)
- https://git.kernel.org/stable/c/2171c5cb2fbc3e03af7e8116cd58736c09328655 (opens in a new tab)
- https://git.kernel.org/stable/c/6188a1c762eb9bbd444f47696eda77a5eae6207a (opens in a new tab)
- https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html (opens in a new tab)
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2024-42674 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2024-47756)Record last updated .