PT-2024-8189 · Linux+7 · Linux Kernel+7
Bryan Odonoghue
·
Published
2024-03-08
·
Updated
2025-09-29
·
CVE-2024-27038
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
The issue is related to a NULL pointer dereference in the
clk core get() function. This function can dereference a NULL pointer in a specific sequence of calls, including of clk get hw from clkspec(), of clk get hw from provider(), and clk get hw(). The clk get hw() function can return NULL, which is then dereferenced by clk core get() at hw->core. Prior to a specific commit, a check was performed that would have caught the NULL pointer. The function needs to be updated to check for hw before dereferencing it and return NULL if hw is NULL.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Linuxmint
Linux Kernel
Red Hat
Red Os
Suse
Ubuntu