Vulnerability · Published Jun 19, 2024 · Assigned by Linux
CVE-2024-38573cppc_cpufreq: Fix possible null pointer dereference
High 7.5
In plain English
A high-severity null pointer dereference in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 63% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)1.0%top 36.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
In the Linux kernel, the following vulnerability has been resolved: cppc_cpufreq: Fix possible null pointer dereference cppc_cpufreq_get_rate() and hisi_cppc_cpufreq_get_rate() can be called from different places with various parameters. So cpufreq_cpu_get() can return null as 'policy' in some circumstances. Fix this bug by adding null return check. Found by Linux Verification Center (linuxtesting.org) with SVACE.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:9 | bpftool | 7.3.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | kernel | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | kernel-64k | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | kernel-64k-core | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | kernel-64k-debug | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | kernel-64k-debug-core | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | kernel-64k-debug-devel | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | kernel-64k-debug-devel-matched | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | kernel-64k-debug-modules | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | kernel-64k-debug-modules-core | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | kernel-64k-debug-modules-extra | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | kernel-64k-devel | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | kernel-64k-devel-matched | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | kernel-64k-modules | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | kernel-64k-modules-core | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | kernel-64k-modules-extra | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | kernel-abi-stablelists | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | kernel-core | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | kernel-cross-headers | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | kernel-debug | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | kernel-debug-core | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | kernel-debug-devel | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | kernel-debug-devel-matched | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | kernel-debug-modules | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | kernel-debug-modules-core | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | kernel-debug-modules-extra | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | kernel-debug-uki-virt | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | kernel-devel | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | kernel-devel-matched | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | kernel-doc | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | kernel-headers | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | kernel-modules | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | kernel-modules-core | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | kernel-modules-extra | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | kernel-rt | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | kernel-rt-core | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | kernel-rt-debug | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | kernel-rt-debug-core | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | kernel-rt-debug-devel | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | kernel-rt-debug-modules | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | kernel-rt-debug-modules-core | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | kernel-rt-debug-modules-extra | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | kernel-rt-devel | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | kernel-rt-modules | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | kernel-rt-modules-core | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | kernel-rt-modules-extra | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | kernel-tools | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | kernel-tools-libs | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | kernel-tools-libs-devel | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | kernel-uki-virt | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | kernel-zfcpdump | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | kernel-zfcpdump-core | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | kernel-zfcpdump-devel | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | kernel-zfcpdump-devel-matched | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | kernel-zfcpdump-modules | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | kernel-zfcpdump-modules-core | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | kernel-zfcpdump-modules-extra | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | libperf | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | perf | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | python3-perf | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | rtla | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| AlmaLinux:9 | rv | 5.14.0-427.37.1.el9_4 | ALSA-2024:6997 |
| Debian:12 | linux | 6.1.94-1 | DEBIAN-CVE-2024-38573 |
| Debian:13 | linux | 6.8.12-1 | DEBIAN-CVE-2024-38573 |
| Debian:14 | linux | 6.8.12-1 | DEBIAN-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux | 5.15.0-121.131 | USN-7007-1 |
| Ubuntu:22.04:LTS | linux | 5.15.0-121.131 | UBUNTU-CVE-2024-38573 |
| Ubuntu:24.04:LTS | linux | 6.8.0-40.40 | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-allwinner-5.19 | no fix listed | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-aws | 5.15.0-1069.75 | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-aws | 5.15.0-1069.75 | USN-7007-1 |
| Ubuntu:24.04:LTS | linux-aws | 6.8.0-1013.14 | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-aws-5.19 | no fix listed | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-aws-6.2 | no fix listed | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-aws-6.5 | no fix listed | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-aws-6.8 | 6.8.0-1013.14~22.04.1 | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-azure | 5.15.0-1072.81 | USN-7009-1 |
| Ubuntu:22.04:LTS | linux-azure | 5.15.0-1072.81 | UBUNTU-CVE-2024-38573 |
| Ubuntu:24.04:LTS | linux-azure | 6.8.0-1012.14 | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-azure-5.19 | no fix listed | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-azure-6.2 | no fix listed | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-azure-6.5 | no fix listed | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-azure-6.8 | 6.8.0-1012.14~22.04.1 | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-azure-fde | 5.15.0-1072.81.1 | USN-7009-1 |
| Ubuntu:22.04:LTS | linux-azure-fde | 5.15.0-1072.81.1 | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-azure-fde-5.19 | no fix listed | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-azure-fde-6.2 | no fix listed | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-gcp | 5.15.0-1068.76 | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-gcp | 5.15.0-1068.76 | USN-7007-1 |
| Ubuntu:24.04:LTS | linux-gcp | 6.8.0-1012.13 | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-gcp-5.19 | no fix listed | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-gcp-6.2 | no fix listed | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-gcp-6.5 | no fix listed | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-gcp-6.8 | 6.8.0-1012.13~22.04.1 | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-gke | 5.15.0-1066.72 | USN-7007-1 |
| Ubuntu:22.04:LTS | linux-gke | 5.15.0-1066.72 | UBUNTU-CVE-2024-38573 |
| Ubuntu:24.04:LTS | linux-gke | 6.8.0-1008.11 | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-gkeop | 5.15.0-1052.59 | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-gkeop | 5.15.0-1052.59 | USN-7007-1 |
| Ubuntu:22.04:LTS | linux-hwe-5.19 | no fix listed | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-hwe-6.2 | no fix listed | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-hwe-6.5 | no fix listed | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-hwe-6.8 | 6.8.0-40.40~22.04.3 | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-ibm | 5.15.0-1062.65 | USN-7007-1 |
| Ubuntu:22.04:LTS | linux-ibm | 5.15.0-1062.65 | UBUNTU-CVE-2024-38573 |
| Ubuntu:24.04:LTS | linux-ibm | 6.8.0-1010.10 | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-ibm-6.8 | 6.8.0-1010.10~22.04.1 | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-intel-iotg | 5.15.0-1064.70 | USN-7007-1 |
| Ubuntu:22.04:LTS | linux-intel-iotg | 5.15.0-1064.70 | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-kvm | 5.15.0-1066.71 | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-kvm | 5.15.0-1066.71 | USN-7007-1 |
| Ubuntu:22.04:LTS | linux-lowlatency | 5.15.0-121.131 | USN-7007-3 |
| Ubuntu:22.04:LTS | linux-lowlatency | 5.15.0-121.131 | UBUNTU-CVE-2024-38573 |
| Ubuntu:24.04:LTS | linux-lowlatency | 6.8.0-40.40.1 | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-5.19 | no fix listed | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.2 | no fix listed | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.5 | no fix listed | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.8 | 6.8.0-40.40.1~22.04.1 | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-nvidia | 5.15.0-1064.65 | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-nvidia | 5.15.0-1064.65 | USN-7007-1 |
| Ubuntu:24.04:LTS | linux-nvidia | 6.8.0-1011.11 | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-nvidia-6.2 | no fix listed | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-nvidia-6.5 | no fix listed | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-nvidia-6.8 | 6.8.0-1011.11~22.04.1 | UBUNTU-CVE-2024-38573 |
| Ubuntu:24.04:LTS | linux-nvidia-lowlatency | 6.8.0-1011.11.1 | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-nvidia-tegra | 5.15.0-1028.28 | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-nvidia-tegra-igx | 5.15.0-1016.16 | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-oem-5.17 | no fix listed | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-oem-6.0 | no fix listed | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-oem-6.1 | no fix listed | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-oem-6.5 | no fix listed | UBUNTU-CVE-2024-38573 |
| Ubuntu:24.04:LTS | linux-oem-6.8 | 6.8.0-1010.10 | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-oracle | 5.15.0-1067.73 | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-oracle | 5.15.0-1067.73 | USN-7007-1 |
| Ubuntu:24.04:LTS | linux-oracle | 6.8.0-1010.10 | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-oracle-6.5 | no fix listed | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-oracle-6.8 | 6.8.0-1010.10~22.04.1 | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-raspi | 5.15.0-1062.65 | USN-7007-1 |
| Ubuntu:22.04:LTS | linux-raspi | 5.15.0-1062.65 | UBUNTU-CVE-2024-38573 |
| Ubuntu:24.04:LTS | linux-raspi | 6.8.0-1009.10 | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-realtime | no fix listed | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-riscv | no fix listed | UBUNTU-CVE-2024-38573 |
| Ubuntu:24.04:LTS | linux-riscv | 6.8.0-40.40.1 | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-riscv-5.19 | no fix listed | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-riscv-6.5 | no fix listed | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-riscv-6.8 | 6.8.0-40.40.1~22.04.1 | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-starfive-5.19 | no fix listed | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-starfive-6.2 | no fix listed | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-starfive-6.5 | no fix listed | UBUNTU-CVE-2024-38573 |
| Ubuntu:22.04:LTS | linux-xilinx-zynqmp | 5.15.0-1035.39 | UBUNTU-CVE-2024-38573 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | a28b2bfc099c6b9caa6ef697660408e076a32019 – before 9a185cc5a79ba408e1c73375706630662304f618a28b2bfc099c6b9caa6ef697660408e076a32019 – before 769c4f355b7962895205b86ad35617873feef9a5a28b2bfc099c6b9caa6ef697660408e076a32019 – before f84b9b25d045e67a7eee5e73f21278c8ab06713ca28b2bfc099c6b9caa6ef697660408e076a32019 – before b18daa4ec727c0266de5bfc78e818d168cc4aedfa28b2bfc099c6b9caa6ef697660408e076a32019 – before dfec15222529d22b15e5b0d63572a9e39570cab4a28b2bfc099c6b9caa6ef697660408e076a32019 – before cf7de25878a1f4508c69dc9f6819c21ba177dbfe |
| Linux | Linux | 5.11 |
Weakness: CWE-476 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References
- https://git.kernel.org/stable/c/9a185cc5a79ba408e1c73375706630662304f618
- https://git.kernel.org/stable/c/769c4f355b7962895205b86ad35617873feef9a5
- https://git.kernel.org/stable/c/f84b9b25d045e67a7eee5e73f21278c8ab06713c
- https://git.kernel.org/stable/c/b18daa4ec727c0266de5bfc78e818d168cc4aedf
- https://git.kernel.org/stable/c/dfec15222529d22b15e5b0d63572a9e39570cab4
- https://git.kernel.org/stable/c/cf7de25878a1f4508c69dc9f6819c21ba177dbfe