In the Linux kernel, the following vulnerability has been resolved:
clk: zynq: Prevent null pointer dereference caused by kmalloc failure
The kmalloc() in zynq_clk_setup() will return null if the physical memory has run out. As a result, if we use snprintf() to write data to the null address, the null pointer dereference bug will happen.
This patch uses a stack variable to replace the kmalloc().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 1, 2024 |
| Suse | — | Upgrade dtb-caviumUpgrade gfs2-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-rt-develUpgrade kselftests-kmp-64kbUpgrade kernel-debugUpgrade kernel-rt_debug-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-defaultUpgrade dtb-apmUpgrade dtb-renesasUpgrade kernel-kvmsmall-develUpgrade kernel-rt-livepatchUpgrade kernel-64kb-develUpgrade gfs2-kmp-rtUpgrade dtb-exynosUpgrade kernel-obs-qaUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-docsUpgrade kernel-symsUpgrade kernel-zfcpdumpUpgrade dtb-qcomUpgrade kernel-default-baseUpgrade reiserfs-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-default-extraUpgrade kselftests-kmp-defaultUpgrade dtb-amdUpgrade ocfs2-kmp-rtUpgrade dtb-xilinxUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-optionalUpgrade dtb-hisiliconUpgrade dtb-armUpgrade kernel-default-vdsoUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-optionalUpgrade kernel-debug-develUpgrade kernel-sourceUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-azureUpgrade gfs2-kmp-azureUpgrade kernel-develUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-develUpgrade dtb-marvellUpgrade dtb-socionextUpgrade dlm-kmp-defaultUpgrade kernel-kvmsmallUpgrade dtb-rockchipUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-extraUpgrade dtb-nvidiaUpgrade kernel-syms-azureUpgrade kernel-rt-optionalUpgrade dtb-amazonUpgrade kernel-source-vanillaUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-alteraUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-azure-extraUpgrade kernel-rt-extraUpgrade dtb-freescaleUpgrade dtb-broadcomUpgrade dtb-appleUpgrade dlm-kmp-64kbUpgrade dtb-sprdUpgrade kernel-source-rtUpgrade kernel-default-base-rebuildUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-vdsoUpgrade kernel-macrosUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-livepatchUpgrade kernel-azureUpgrade kernel-default-develUpgrade kernel-obs-buildUpgrade kernel-rt-livepatch-develUpgrade kernel-rtUpgrade kernel-azure-optionalUpgrade dtb-lgUpgrade dtb-amlogicUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-devel-azureUpgrade kernel-syms-rtUpgrade kernel-docs-htmlUpgrade kernel-64kbUpgrade dlm-kmp-rtUpgrade kernel-azure-develUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-source-azure | Jun 13, 2024 | May 1, 2024 |
| Ubuntu | — | Upgrade linux-image-awsUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-6.8.0-1006-oemUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-6.8.0-35-genericUpgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-112-genericUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-virtualUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1008-azureUpgrade linux-image-5.15.0-1066-azureUpgrade linux-image-intel-iotgUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-raspiUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gkeUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1063-awsUpgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-oem-20.04cUpgrade linux-image-ibmUpgrade linux-image-5.15.0-113-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-azureUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-oem-20.04Upgrade linux-image-oracle-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-oem-24.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1009-awsUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-intelUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-oem-20.04bUpgrade linux-image-genericUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-5.15.0-1030-xilinx-zynqmp | Jul 1, 2024 | May 1, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | May 1, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub