In the Linux kernel, the following vulnerability has been resolved:
clk: Fix clk_core_get NULL dereference
It is possible for clk_core_get to dereference a NULL in the following sequence:
clk_core_get() of_clk_get_hw_from_clkspec() __of_clk_get_hw_from_provider() __clk_get_hw()
__clk_get_hw() can return NULL which is dereferenced by clk_core_get() at hw->core.
Prior to commit dde4eff47c82 ("clk: Look for parents with clkdev based clk_lookups") the check IS_ERR_OR_NULL() was performed which would have caught the NULL.
Reading the description of this function it talks about returning NULL but that cannot be so at the moment.
Update the function to check for hw before dereferencing it and return NULL if hw is NULL.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.153-100.162Upgrade kernelUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-livepatch-5.10.214-202.855Upgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64 | Aug 28, 2024 | May 1, 2024 |
| Amazon_linux_2023 | — | Upgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-libbpfUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-modules-extraUpgrade kernel-livepatch-6.1.84-99.169Upgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extra-commonUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-tools | Feb 17, 2025 | May 1, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftool | Oct 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libs | Oct 8, 2024 | May 1, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Dec 5, 2024 | May 1, 2024 |
| Suse | — | Upgrade kernel-rt_debug-vdsoUpgrade dtb-renesasUpgrade kernel-debug-develUpgrade kernel-debug-livepatch-develUpgrade kernel-default-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debugUpgrade kernel-syms-rtUpgrade reiserfs-kmp-defaultUpgrade dtb-sprdUpgrade dtb-amdUpgrade kernel-docsUpgrade kernel-rt-extraUpgrade kernel-source-rtUpgrade kernel-obs-buildUpgrade dtb-marvellUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-vdsoUpgrade kernel-debugUpgrade cluster-md-kmp-defaultUpgrade dtb-apmUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kb-extraUpgrade dtb-broadcomUpgrade kernel-macrosUpgrade dtb-appleUpgrade kernel-64kb-optionalUpgrade kernel-docs-htmlUpgrade kernel-obs-qaUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-azure-extraUpgrade dlm-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-default-extraUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade dtb-amlogicUpgrade kselftests-kmp-rtUpgrade dtb-hisiliconUpgrade dtb-socionextUpgrade kernel-rt-optionalUpgrade kernel-rt-livepatch-develUpgrade dtb-armUpgrade cluster-md-kmp-64kbUpgrade kernel-default-baseUpgrade dtb-nvidiaUpgrade kernel-rt-vdsoUpgrade kernel-symsUpgrade kernel-defaultUpgrade dlm-kmp-azureUpgrade dtb-caviumUpgrade kernel-rtUpgrade dtb-rockchipUpgrade kernel-64kb-develUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-debug-vdsoUpgrade gfs2-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-64kb-livepatch-develUpgrade dtb-amazonUpgrade kernel-source-vanillaUpgrade kernel-azureUpgrade kernel-sourceUpgrade kernel-azure-optionalUpgrade dtb-lgUpgrade kernel-zfcpdumpUpgrade kernel-azure-livepatch-develUpgrade dtb-xilinxUpgrade kernel-default-vdsoUpgrade kernel-default-optionalUpgrade kernel-default-develUpgrade dlm-kmp-64kbUpgrade kernel-rt-livepatchUpgrade dtb-freescaleUpgrade dtb-allwinnerUpgrade kernel-kvmsmallUpgrade kernel-64kbUpgrade gfs2-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-rt_debug-develUpgrade kernel-devel-azureUpgrade kernel-default-livepatchUpgrade kernel-azure-develUpgrade dtb-alteraUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-syms-azureUpgrade ocfs2-kmp-azureUpgrade kernel-kvmsmall-develUpgrade dtb-qcomUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-azureUpgrade dtb-exynosUpgrade reiserfs-kmp-azureUpgrade kernel-develUpgrade kernel-rt-develUpgrade kernel-devel-rtUpgrade kernel-default-base-rebuild | May 15, 2024 | May 1, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-24.04aUpgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1009-awsUpgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1040-iotUpgrade linux-image-5.4.0-189-genericUpgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-virtualUpgrade linux-image-ibm-classicUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-5.15.0-112-genericUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-raspi2Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-6.8.0-1006-oemUpgrade linux-image-kvmUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-oracle-64kUpgrade linux-image-azure-fdeUpgrade linux-image-genericUpgrade linux-image-bluefieldUpgrade linux-image-oem-24.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-oem-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-5.15.0-1063-awsUpgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-oemUpgrade linux-image-intelUpgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1008-azureUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gkeUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-oracleUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-113-genericUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-azureUpgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-5.15.0-1066-azureUpgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-intel-iotgUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-35-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-generic-64kUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1128-awsUpgrade linux-image-5.15.0-1058-intel-iotg | Jul 1, 2024 | May 1, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 1, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub