CVE-2024-53231

Published: Dec 27, 2024Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw() cpufreq_cpu_get_raw() may return NULL if the cpu is not in policy->cpus cpu mask and it will cause null pointer dereference.

Affected (4)

Products: Linux: Linux Kernel

1 product

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	From 5.19 to 6.1.120
Linux Linux Kernel	From 6.12 to 6.12.2
Linux Linux Kernel	From 6.2 to 6.6.64
Linux Linux Kernel	From 6.7 to 6.11.11

Related CWEs

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

References (6)

https://git.kernel.org/stable/c/65fe2f7fdafe2698a343661800434b3f2e51041e

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/a357b63fd21e4b2791008c2175ba7a8c235ebce1

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/a78e7207564258db6e373e86294a85f9d646d35a

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/e07570a8f2cfc51260c6266cb8e1bd4777a610d6

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/e9b39f1924b76abc18881e4ce899fb232dd23d12

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.