CVE-2024-27038: clk: Fix clk_core_get NULL dereference
First published: Wed May 01 2024(Updated: )
In the Linux kernel, the following vulnerability has been resolved: clk: Fix clk_core_get NULL dereference It is possible for clk_core_get to dereference a NULL in the following sequence: clk_core_get() of_clk_get_hw_from_clkspec() __of_clk_get_hw_from_provider() __clk_get_hw() __clk_get_hw() can return NULL which is dereferenced by clk_core_get() at hw->core. Prior to commit dde4eff47c82 ("clk: Look for parents with clkdev based clk_lookups") the check IS_ERR_OR_NULL() was performed which would have caught the NULL. Reading the description of this function it talks about returning NULL but that cannot be so at the moment. Update the function to check for hw before dereferencing it and return NULL if hw is NULL.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 416baaa9-dc9f-4396-8d5f-8c081fb06d67
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/kernel | <5.4.273 | 5.4.273 |
| redhat/kernel | <5.10.214 | 5.10.214 |
| redhat/kernel | <5.15.153 | 5.15.153 |
| redhat/kernel | <6.1.83 | 6.1.83 |
| redhat/kernel | <6.6.23 | 6.6.23 |
| redhat/kernel | <6.7.11 | 6.7.11 |
| redhat/kernel | <6.8.2 | 6.8.2 |
| redhat/kernel | <6.9 | 6.9 |
| Linux kernel | >=5.2<5.4.273 | |
| Linux kernel | >=5.5<5.10.214 | |
| Linux kernel | >=5.11<5.15.153 | |
| Linux kernel | >=5.16<6.1.83 | |
| Linux kernel | >=6.2<6.6.23 | |
| Linux kernel | >=6.7<6.7.11 | |
| Linux kernel | >=6.8<6.8.2 | |
| Debian | =10.0 | |
| debian/linux | 5.10.223-1 5.10.234-1 6.1.123-1 6.1.128-1 6.12.12-1 6.12.16-1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://git.kernel.org/stable/c/0efb9ef6fb95384ba631d6819e66f10392aabfa2
- https://git.kernel.org/stable/c/239174535dba11f7b83de0eaaa27909024f8c185
- https://git.kernel.org/stable/c/6f073b24a9e2becd25ac4505a9780a87e621bb51
- https://git.kernel.org/stable/c/a5d9b1aa61b401867b9066d54086b3e4ee91f8ed
- https://git.kernel.org/stable/c/a8b2b26fdd011ebe36d68a9a321ca45801685959
- https://git.kernel.org/stable/c/c554badcae9c45b737a22d23454170c6020b90e6
- https://git.kernel.org/stable/c/d7ae7d1265686b55832a445b1db8cdd69738ac07
- https://git.kernel.org/stable/c/e97fe4901e0f59a0bfd524578fe3768f8ca42428
- https://launchpad.net/bugs/cve/CVE-2024-27038
- https://access.redhat.com/security/cve/CVE-2024-27038
- https://lore.kernel.org/linux-cve-announce/2024050112-CVE-2024-27038-3af3@gregkh/T
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2278457
- https://access.redhat.com/errata/RHSA-2024:9315
- https://bugzilla.redhat.com/show_bug.cgi?id=2278456
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27038
- https://nvd.nist.gov/vuln/detail/CVE-2024-27038
- https://security-tracker.debian.org/tracker/CVE-2024-27038
- https://ubuntu.com/security/CVE-2024-27038
- https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
- https://git.kernel.org/linus/e97fe4901e0f59a0bfd524578fe3768f8ca42428
Frequently Asked Questions
What is the severity of CVE-2024-27038?
CVE-2024-27038 has been identified as a significant vulnerability due to its potential for causing a NULL dereference in the Linux kernel.
How do I fix CVE-2024-27038?
To remediate CVE-2024-27038, upgrade to the kernel version 5.4.273 or newer, 5.10.214 or newer, 5.15.153 or newer, 6.1.83 or newer, 6.6.23 or newer, 6.7.11 or newer, 6.8.2, or 6.9.
Which systems are affected by CVE-2024-27038?
CVE-2024-27038 affects various versions of the Linux kernel from 5.2 up to 6.9 and specific Debian Linux version 10.0.
What is the impact of CVE-2024-27038?
The impact of CVE-2024-27038 includes possible system crashes or instability due to NULL pointer dereference.
Has CVE-2024-27038 been resolved?
Yes, CVE-2024-27038 has been resolved through patches in the updated kernel versions listed in the remediation section.
- agent/title
- agent/type
- agent/first-publish-date
- collector/launchpad-cve
- source/Launchpad
- agent/author
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2024-27038
- agent/software-canonical-lookup
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/trending
- agent/weakness
- agent/last-modified-date
- agent/remedy
- agent/severity
- agent/description
- agent/source
- agent/event
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup-request
- collector/nvd-cve
- agent/softwarecombine
- collector/usn-cve
- source/Ubuntu
- collector/security-tracker-debian
- source/Debian
- package-manager/redhat
- vendor/linux
- canonical/linux kernel
- version/linux kernel/5.2
- version/linux kernel/5.5
- version/linux kernel/5.11
- version/linux kernel/5.16
- version/linux kernel/6.2
- version/linux kernel/6.7
- version/linux kernel/6.8
- vendor/debian
- canonical/debian
- version/debian/10.0
- package-manager/debian