CVE-2024-26975

powercap: intel_rapl: Fix a NULL pointer dereference

published May 1, 2024

CVSS
—
EPSS
0%
Percentile
12.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

powercap: intel_rapl: Fix a NULL pointer dereference

A NULL pointer dereference is triggered when probing the MMIO RAPL

driver on platforms with CPU ID not listed in intel_rapl_common CPU

model list.

This is because the intel_rapl_common module still probes on such

platforms even if 'defaults_msr' is not set after commit 1488ac990ac8

("powercap: intel_rapl: Allow probing without CPUID match"). Thus the

MMIO RAPL rp->priv->defaults is NULL when registering to RAPL framework.

Fix the problem by adding sanity check to ensure rp->priv->rapl_defaults

is always valid.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00227 · 12.7th percentile
Published
2024-05-01T05:20Z
EPSS history
Timeline
  • 01 MAY 05:20Z
    powercap: intel_rapl: Fix a NULL pointer dereference
    cvelistv5