CVE-2024-38573

cppc_cpufreq: Fix possible null pointer dereference

High · published June 19, 2024

CVSS v3.1
7.5
EPSS
1%
Percentile
62.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

cppc_cpufreq: Fix possible null pointer dereference

cppc_cpufreq_get_rate() and hisi_cppc_cpufreq_get_rate() can be called from

different places with various parameters. So cpufreq_cpu_get() can return

null as 'policy' in some circumstances.

Fix this bug by adding null return check.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01003 · 62.6th percentile
Published
2024-06-19T13:35Z
EPSS history
Timeline
  • 19 JUN 13:35Z
    cppc_cpufreq: Fix possible null pointer dereference
    cvelistv5