Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2024-38573

cppc_cpufreq: Fix possible null pointer dereference

Description

In the Linux kernel, the following vulnerability has been resolved: cppc_cpufreq: Fix possible null pointer dereference cppc_cpufreq_get_rate() and hisi_cppc_cpufreq_get_rate() can be called from different places with various parameters. So cpufreq_cpu_get() can return null as 'policy' in some circumstances. Fix this bug by adding null return check. Found by Linux Verification Center (linuxtesting.org) with SVACE.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • a28b2bfc099c6b9caa6ef697660408e076a32019 to < 9a185cc5a79ba408e1c73375706630662304f618affected
  • a28b2bfc099c6b9caa6ef697660408e076a32019 to < 769c4f355b7962895205b86ad35617873feef9a5affected
  • a28b2bfc099c6b9caa6ef697660408e076a32019 to < f84b9b25d045e67a7eee5e73f21278c8ab06713caffected
  • a28b2bfc099c6b9caa6ef697660408e076a32019 to < b18daa4ec727c0266de5bfc78e818d168cc4aedfaffected
  • a28b2bfc099c6b9caa6ef697660408e076a32019 to < dfec15222529d22b15e5b0d63572a9e39570cab4affected
  • a28b2bfc099c6b9caa6ef697660408e076a32019 to < cf7de25878a1f4508c69dc9f6819c21ba177dbfeaffected

Linux Linux

Default version status: affected

  • 5.11affected
  • 0 to < 5.11unaffected
  • 5.15.161 to ≤ 5.15.*unaffected
  • 6.1.93 to ≤ 6.1.*unaffected
  • 6.6.33 to ≤ 6.6.*unaffected
  • 6.8.12 to ≤ 6.8.*unaffected
  • 6.9.3 to ≤ 6.9.*unaffected
  • 6.10 to ≤ *unaffected

References