CVE-2024-27051

MEDIUM

Linux kernel - NULL Pointer Dereference

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return value cpufreq_cpu_get may return NULL. To avoid NULL-dereference check it and return 0 in case of error. Found by Linux Verification Center (linuxtesting.org) with SVACE.

References (8)

[Patch] https://git.kernel.org/stable/c/74b84d0d71180330efe67c82f973a87f828323e5

[Patch] https://git.kernel.org/stable/c/9127599c075caff234359950117018a010dd01db

[Patch] https://git.kernel.org/stable/c/b25b64a241d769e932a022e5c780cf135ef56035

[Patch] https://git.kernel.org/stable/c/d951cf510fb0df91d3abac0121a59ebbc63c0567

[Patch] https://git.kernel.org/stable/c/e6e3e51ffba0784782b1a076d7441605697ea3c6

[Patch] https://git.kernel.org/stable/c/e72160cb6e23b78b41999d6885a34ce8db536095

[Patch] https://git.kernel.org/stable/c/f661017e6d326ee187db24194cabb013d81bc2a6

[Patch] https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html

Scores

CVSS v3 5.5

EPSS 0.0001

EPSS Percentile 0.5%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Classification

CWE

CWE-476

Status published

Affected Products (7)

linux/linux_kernel < 5.10.214

linux/Kernel < 5.10.214linux

linux/Kernel < 5.15.153linux

linux/Kernel < 6.1.83linux

linux/Kernel < 6.6.23linux

linux/Kernel < 6.7.11linux

linux/Kernel < 6.8.2linux

Timeline

Published May 01, 2024

Tracked Since Feb 18, 2026