CVE-2024-42100

clk: sunxi-ng: common: Don't call hw_to_ccu_common on hw without common

published July 30, 2024

CVSS
—
EPSS
0%
Percentile
14.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

clk: sunxi-ng: common: Don't call hw_to_ccu_common on hw without common

In order to set the rate range of a hw sunxi_ccu_probe calls

hw_to_ccu_common() assuming all entries in desc->ccu_clks are contained

in a ccu_common struct. This assumption is incorrect and, in

consequence, causes invalid pointer de-references.

Remove the faulty call. Instead, add one more loop that iterates over

the ccu_clks and sets the rate range, if required.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00239 · 14.1th percentile
Published
2024-07-30T07:45Z
EPSS history
Timeline
  • 30 JUL 07:45Z
    clk: sunxi-ng: common: Don't call hw_to_ccu_common on hw without common
    cvelistv5