CVE-2024-27051: cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return value
In the Linux kernel, the following vulnerability has been resolved:
cpufreq: brcmstb-avs-cpufreq: add check for cpufreqcpuget's return value
cpufreqcpuget may return NULL. To avoid NULL-dereference check it and return 0 in case of error.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.85-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.7.12-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-27051?
CVE-2024-27051 has a moderate severity level due to its potential for causing NULL dereference issues in the Linux kernel.
Which versions of the Linux kernel are affected by CVE-2024-27051?
CVE-2024-27051 affects Linux kernel versions from 4.10 up to and including 6.8.2.
How do I fix CVE-2024-27051?
To fix CVE-2024-27051, upgrade to a patched version of the Linux kernel such as 5.10.223-1 or 6.1.123-1.
What causes the vulnerability in CVE-2024-27051?
CVE-2024-27051 is caused by the cpufreq_cpu_get function potentially returning NULL, leading to a NULL dereference.
Is it safe to use affected versions of the Linux kernel with CVE-2024-27051?
Using affected versions of the Linux kernel with CVE-2024-27051 poses a risk and should be avoided until patched.