Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2024-27037

clk: zynq: Prevent null pointer dereference caused by kmalloc failure

Description

In the Linux kernel, the following vulnerability has been resolved: clk: zynq: Prevent null pointer dereference caused by kmalloc failure The kmalloc() in zynq_clk_setup() will return null if the physical memory has run out. As a result, if we use snprintf() to write data to the null address, the null pointer dereference bug will happen. This patch uses a stack variable to replace the kmalloc().

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 0ee52b157b8ed88550ddd6291e54bb4bfabde364 to < 01511ac7be8e45f80e637f6bf61af2d3d2dee9dbaffected
  • 0ee52b157b8ed88550ddd6291e54bb4bfabde364 to < 8c4889a9ea861d7be37463c10846eb75e1b49c9daffected
  • 0ee52b157b8ed88550ddd6291e54bb4bfabde364 to < 0801c893fd48cdba66a3c8f44c3fe43cc67d3b85affected
  • 0ee52b157b8ed88550ddd6291e54bb4bfabde364 to < ca976c6a592f789700200069ef9052493c0b73d8affected
  • 0ee52b157b8ed88550ddd6291e54bb4bfabde364 to < 58a946ab43501f2eba058d24d96af0ad1122475baffected
  • 0ee52b157b8ed88550ddd6291e54bb4bfabde364 to < 7938e9ce39d6779d2f85d822cc930f73420e54a6affected

Linux Linux

Default version status: affected

  • 3.11affected
  • 0 to < 3.11unaffected
  • 5.15.153 to ≤ 5.15.*unaffected
  • 6.1.83 to ≤ 6.1.*unaffected
  • 6.6.23 to ≤ 6.6.*unaffected
  • 6.7.11 to ≤ 6.7.*unaffected
  • 6.8.2 to ≤ 6.8.*unaffected
  • 6.9 to ≤ *unaffected

References