CVE-2024-38615CWE-476

CVE-2024-38615

Medium · published June 19, 2024

CVSS v3.1
5.5
EPSS
0%
Percentile
13.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

cpufreq: exit() callback is optional

The exit() callback is optional and shouldn't be called without checking

a valid pointer first.

Also, we must clear freq_table pointer even if the exit() callback isn't

present.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00237 · 13.9th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2024-06-19T18:15Z
Affected products (7)
ProductVersionsFixed in
linux/linux_kernel≥ 5.1, < 5.4.2785.4.278
linux/linux_kernel≥ 5.5, < 5.10.2195.10.219
linux/linux_kernel≥ 5.11, < 5.15.1615.15.161
linux/linux_kernel≥ 5.16, < 6.1.936.1.93
linux/linux_kernel≥ 6.2, < 6.6.336.6.33
linux/linux_kernel≥ 6.7, < 6.8.126.8.12
linux/linux_kernel≥ 6.9, < 6.9.36.9.3
References (18)
https://git.kernel.org/stable/c/2d730b465e377396d2a09a53524b96b111f7ccb6 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/35db5e76d5e9f752476df5fa0b9018a2398b0378 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/3e99f060cfd2e36504d62c9132b453ade5027e1c · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/8bc9546805e572ad101681437a49939f28777273 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/a8204d1b6ff762d2171d365c2c8560285d0a233d · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/ae37ebca325097d773d7bb6ec069123b30772872 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/b8f85833c05730d631576008daaa34096bc7f3ce · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/dfc56ff5ec9904c008e9376d90a6d7e2d2bec4d3 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/2d730b465e377396d2a09a53524b96b111f7ccb6 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/35db5e76d5e9f752476df5fa0b9018a2398b0378 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/3e99f060cfd2e36504d62c9132b453ade5027e1c · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/8bc9546805e572ad101681437a49939f28777273 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/a8204d1b6ff762d2171d365c2c8560285d0a233d · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/ae37ebca325097d773d7bb6ec069123b30772872 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/b8f85833c05730d631576008daaa34096bc7f3ce · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/dfc56ff5ec9904c008e9376d90a6d7e2d2bec4d3 · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-265688.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://cert-portal.siemens.com/productcert/html/ssa-613116.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 19 JUN 13:56Z
    cpufreq: exit() callback is optional
    cvelistv5