CVE-2024-53230: cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost()
In the Linux kernel, the following vulnerability has been resolved:
cpufreq: CPPC: Fix possible null-ptr-deref for cppcgetcpucost()
cpufreqcpugetraw() may return NULL if the cpu is not in policy->cpus cpu mask and it will cause null pointer dereference, so check NULL for cppcgetcpucost().
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-53230?
The severity of CVE-2024-53230 is critical due to the potential for a null pointer dereference in the Linux kernel.
How do I fix CVE-2024-53230?
To fix CVE-2024-53230, users should update their Linux kernel to a version that includes the fix, specifically 6.1.120 or higher, 6.6.64 or higher, 6.11.11 or higher, or 6.12.2 or higher.
Which versions of the Linux kernel are vulnerable to CVE-2024-53230?
Versions of the Linux kernel vulnerable to CVE-2024-53230 include those between 5.19 and 6.1.120, 6.2 and 6.6.64, 6.7 and 6.11.11, and 6.12 and 6.12.2.
Is CVE-2024-53230 related to CPU performance issues in Linux?
Yes, CVE-2024-53230 is related to the cpufreq subsystem in Linux, which manages CPU frequency scaling and could lead to performance degradation due to a null pointer dereference.
Who is affected by CVE-2024-53230?
Anyone using the specified vulnerable versions of the Linux kernel on their systems is affected by CVE-2024-53230 and should take immediate action to mitigate the risk.