The PAM module pam_cap.so of libcap configuration supports group names starting with “@”, during actual parsing, configurations not starting with “@” are incorrectly recognized as group names.
The memory allocation function ACPI_ALLOCATE_ZEROED does not guarantee a successful allocation, but the subsequent code directly dereferences the pointer that receives it, which may lead to null pointer dereference.
CVSS 3.1MEDIUM 5.3·Local·Low privileges·User interaction·EPSS 0.00172·Published 2024-04-17·Fixed in v6.9CWE-476
