CVE-2024-53230

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-53230
In the Linux kernel, the following vulnerability has been resolved: cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost() cpufreq_cpu_get_raw() may return NULL if the cpu is not in policy->cpus cpu mask and it will cause null pointer dereference, so check NULL for cppc_get_cpu_cost().

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/1975b481f644f8f841d9c188e3c214fce187f18b Patch
https://git.kernel.org/stable/c/1a1374bb8c5926674973d849feed500bc61ad535 Patch
https://git.kernel.org/stable/c/6be57617a38b3f33266acecdb3c063c1c079aaf7 Patch
https://git.kernel.org/stable/c/afd22d9839359829776abb55cc9bc4946e888704 Patch
https://git.kernel.org/stable/c/f05ef81db63889f6f14eb77fd140dac6cedb6f7f Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

06 Jan 2025, 17:19

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: cpufreq: CPPC: Se corrige la posible desreferenciación de puntero nulo para cppc_get_cpu_cost(). cpufreq_cpu_get_raw() puede devolver NULL si la CPU no está en la máscara de CPU policy->cpus y provocará una desreferenciación de puntero nulo, así que verifique NULL para cppc_get_cpu_cost().
CWE CWE-476
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/1975b481f644f8f841d9c188e3c214fce187f18b - () https://git.kernel.org/stable/c/1975b481f644f8f841d9c188e3c214fce187f18b - Patch
References () https://git.kernel.org/stable/c/1a1374bb8c5926674973d849feed500bc61ad535 - () https://git.kernel.org/stable/c/1a1374bb8c5926674973d849feed500bc61ad535 - Patch
References () https://git.kernel.org/stable/c/6be57617a38b3f33266acecdb3c063c1c079aaf7 - () https://git.kernel.org/stable/c/6be57617a38b3f33266acecdb3c063c1c079aaf7 - Patch
References () https://git.kernel.org/stable/c/afd22d9839359829776abb55cc9bc4946e888704 - () https://git.kernel.org/stable/c/afd22d9839359829776abb55cc9bc4946e888704 - Patch
References () https://git.kernel.org/stable/c/f05ef81db63889f6f14eb77fd140dac6cedb6f7f - () https://git.kernel.org/stable/c/f05ef81db63889f6f14eb77fd140dac6cedb6f7f - Patch
First Time Linux linux Kernel
Linux

27 Dec 2024, 14:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-12-27 14:15

Updated : 2025-01-06 17:19

NVD link : CVE-2024-53230

Mitre link : CVE-2024-53230

CVE.ORG link : CVE-2024-53230

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference