CVE-2024-42100: clk: sunxi-ng: common: Don't call hw_to_ccu_common on hw without common
In the Linux kernel, the following vulnerability has been resolved:
clk: sunxi-ng: common: Don't call hwtoccucommon on hw without common
In order to set the rate range of a hw sunxiccuprobe calls hwtoccucommon() assuming all entries in desc->ccuclks are contained in a ccucommon struct. This assumption is incorrect and, in consequence, causes invalid pointer de-references.
Remove the faulty call. Instead, add one more loop that iterates over the ccuclks and sets the rate range, if required.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-42100?
CVE-2024-42100 has a medium severity level based on its potential impact on the affected systems.
How do I fix CVE-2024-42100?
To fix CVE-2024-42100, update to the latest patched versions of the Linux kernel provided in the remediation list.
Which versions of the Linux kernel are affected by CVE-2024-42100?
CVE-2024-42100 affects multiple versions, including 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, and 6.12.11-1 on Debian.
What type of vulnerability is CVE-2024-42100?
CVE-2024-42100 is a vulnerability related to improper function calls in the clk subsystem of the Linux kernel.
Is CVE-2024-42100 being actively exploited?
As of now, there are no reported active exploits for CVE-2024-42100, but it is advisable to apply patches promptly.