CVE-2024-27037: clk: zynq: Prevent null pointer dereference caused by kmalloc failure
In the Linux kernel, the following vulnerability has been resolved:
clk: zynq: Prevent null pointer dereference caused by kmalloc failure
The kmalloc() in zynqclksetup() will return null if the physical memory has run out. As a result, if we use snprintf() to write data to the null address, the null pointer dereference bug will happen.
This patch uses a stack variable to replace the kmalloc().
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-27037?
CVE-2024-27037 is considered a moderate severity vulnerability due to the risk of null pointer dereference that could lead to denial of service.
How do I fix CVE-2024-27037?
To fix CVE-2024-27037, update your Linux kernel to one of the patched versions, namely 6.1.123-1, 6.1.119-1, 6.12.10-1, or 6.12.11-1.
Which systems are affected by CVE-2024-27037?
CVE-2024-27037 affects certain versions of the Linux kernel prior to the specified patched releases.
What causes CVE-2024-27037?
CVE-2024-27037 is caused by the kmalloc() function returning null due to insufficient physical memory, leading to a potential null pointer dereference.
Is CVE-2024-27037 actively exploited?
As of now, there is no public indication that CVE-2024-27037 is being actively exploited in the wild.