In the Linux kernel, the following vulnerability has been resolved:
clk: Fix clk_core_get NULL dereference
It is possible for clk_core_get to dereference a NULL in the following sequence:
clk_core_get() of_clk_get_hw_from_clkspec() __of_clk_get_hw_from_provider() __clk_get_hw()
__clk_get_hw() can return NULL which is dereferenced by clk_core_get() at hw->core.
Prior to commit dde4eff47c82 ("clk: Look for parents with clkdev based clk_lookups") the check IS_ERR_OR_NULL() was performed which would have caught the NULL.
Reading the description of this function it talks about returning NULL but that cannot be so at the moment.
Update the function to check for hw before dereferencing it and return NULL if hw is NULL.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.214-202.855Upgrade kernel-toolsUpgrade kernelUpgrade kernel-livepatch-5.15.153-100.162Upgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-headers | Aug 28, 2024 | May 1, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-libbpfUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-libbpf-staticUpgrade python3-perfUpgrade kernel-livepatch-6.1.84-99.169Upgrade kernel-tools-debuginfoUpgrade kernel-libbpf-devel | Feb 17, 2025 | May 1, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade bpftool | Oct 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftool | Oct 8, 2024 | May 1, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Dec 5, 2024 | May 1, 2024 |
| Suse | — | Upgrade kernel-symsUpgrade kernel-azure-vdsoUpgrade kernel-obs-buildUpgrade kernel-rt-optionalUpgrade kernel-rt-vdsoUpgrade dlm-kmp-azureUpgrade dtb-socionextUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-obs-qaUpgrade kernel-rt_debugUpgrade kselftests-kmp-rtUpgrade dtb-appleUpgrade kernel-docs-htmlUpgrade kernel-macrosUpgrade kernel-default-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-debug-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-docsUpgrade kernel-source-rtUpgrade dtb-sprdUpgrade kernel-rt-livepatch-develUpgrade dtb-marvellUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-extraUpgrade kernel-debugUpgrade kernel-64kb-optionalUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-defaultUpgrade dtb-amlogicUpgrade dtb-armUpgrade kernel-defaultUpgrade dtb-hisiliconUpgrade kernel-default-extraUpgrade dtb-renesasUpgrade kernel-debug-develUpgrade dtb-apmUpgrade kselftests-kmp-defaultUpgrade kernel-syms-rtUpgrade dtb-broadcomUpgrade dtb-nvidiaUpgrade kernel-64kb-extraUpgrade dtb-amdUpgrade reiserfs-kmp-rtUpgrade kernel-azure-extraUpgrade kernel-default-develUpgrade kernel-64kbUpgrade gfs2-kmp-rtUpgrade kernel-default-optionalUpgrade kernel-sourceUpgrade kernel-rt-livepatchUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kernel-devel-azureUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-azureUpgrade dtb-exynosUpgrade ocfs2-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-64kb-develUpgrade dtb-caviumUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-azureUpgrade kernel-default-vdsoUpgrade kernel-rt-develUpgrade kernel-devel-rtUpgrade kernel-debug-vdsoUpgrade kernel-develUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-azure-livepatch-develUpgrade dtb-lgUpgrade kernel-azure-optionalUpgrade dtb-rockchipUpgrade kernel-azureUpgrade dtb-amazonUpgrade kernel-source-vanillaUpgrade kernel-rtUpgrade kernel-kvmsmallUpgrade dtb-freescaleUpgrade dlm-kmp-64kbUpgrade dtb-xilinxUpgrade dtb-qcomUpgrade kernel-kvmsmall-develUpgrade dtb-allwinnerUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-rt_debug-develUpgrade kernel-default-livepatchUpgrade kernel-azure-develUpgrade dtb-altera | May 15, 2024 | May 1, 2024 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1133-azureUpgrade linux-image-gkeop-5.4Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-azure-lts-20.04Upgrade linux-image-oracleUpgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-intelUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1066-azureUpgrade linux-image-genericUpgrade linux-image-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-oemUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1008-azureUpgrade linux-image-6.8.0-35-genericUpgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1128-awsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1063-awsUpgrade linux-image-5.15.0-113-genericUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-gkeop-5.15Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-azureUpgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-bluefieldUpgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-gcpUpgrade linux-image-aws-lts-20.04Upgrade linux-image-raspi2Upgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-5.4.0-189-genericUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-5.4.0-1040-iotUpgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-6.8.0-1009-awsUpgrade linux-image-gke-5.15Upgrade linux-image-ibmUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1006-oemUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-awsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-oem-osp1Upgrade linux-image-oem-24.04aUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-112-genericUpgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1046-gkeop | Jul 1, 2024 | May 1, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 1, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub