CVE-2024-38573

In the Linux kernel, the following vulnerability has been resolved: cppc_cpufreq: Fix possible null pointer dereference cppc_cpufreq_get_rate() and hisi_cppc_cpufreq_get_rate() can be called from different places with various parameters. So cpufreq_cpu_get() can return null as 'policy' in some circumstances. Fix this bug by adding null return check. Found by Linux Verification Center (linuxtesting.org) with SVACE.

Score

CVSS 3.1 7.5 High

Status

Analyzed - 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Published

2024-06-19

Last modified

2026-05-11

Weaknesses

CWE-476

Affected products

• Acrn (Linux)
• Linux Kernel (Linux)

References

• https://git.kernel.org/stable/c/769c4f355b7962895205b86ad35617873feef9a5
• https://git.kernel.org/stable/c/9a185cc5a79ba408e1c73375706630662304f618
• https://git.kernel.org/stable/c/b18daa4ec727c0266de5bfc78e818d168cc4aedf
• https://git.kernel.org/stable/c/cf7de25878a1f4508c69dc9f6819c21ba177dbfe
• https://git.kernel.org/stable/c/dfec15222529d22b15e5b0d63572a9e39570cab4
• https://git.kernel.org/stable/c/f84b9b25d045e67a7eee5e73f21278c8ab06713c