CVE-2024-53231: cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw()
In the Linux kernel, the following vulnerability has been resolved:
cpufreq: CPPC: Fix possible null-ptr-deref for cpufreqcpugetraw()
cpufreqcpugetraw() may return NULL if the cpu is not in policy->cpus cpu mask and it will cause null pointer dereference.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-53231?
CVE-2024-53231 is classified as a medium severity vulnerability due to the potential for null pointer dereference.
How do I fix CVE-2024-53231?
To mitigate CVE-2024-53231, update the Linux kernel to a version that includes the fix for cpufreq_cpu_get_raw().
What systems are affected by CVE-2024-53231?
CVE-2024-53231 affects multiple versions of the Linux kernel between versions 5.19 to 6.1.120 and certain versions above 6.2.
What are the potential impacts of CVE-2024-53231?
Exploitation of CVE-2024-53231 could lead to system crashes or unexpected behavior due to null pointer dereference.
Is CVE-2024-53231 being actively exploited?
As of now, there are no reports indicating that CVE-2024-53231 is actively being exploited in the wild.