In the Linux kernel, the following vulnerability has been resolved:
clk: Fix clk_core_get NULL dereference
It is possible for clk_core_get to dereference a NULL in the following sequence:
clk_core_get() of_clk_get_hw_from_clkspec() __of_clk_get_hw_from_provider() __clk_get_hw()
__clk_get_hw() can return NULL which is dereferenced by clk_core_get() at hw->core.
Prior to commit dde4eff47c82 ("clk: Look for parents with clkdev based clk_lookups") the check IS_ERR_OR_NULL() was performed which would have caught the NULL.
Reading the description of this function it talks about returning NULL but that cannot be so at the moment.
Update the function to check for hw before dereferencing it and return NULL if hw is NULL.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.153-100.162Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.214-202.855Upgrade kernelUpgrade kernel-tools-debuginfo | Aug 28, 2024 | May 1, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extra-commonUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.1.84-99.169Upgrade perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-libbpf | Feb 17, 2025 | May 1, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libs | Oct 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftool | Oct 8, 2024 | May 1, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Dec 5, 2024 | May 1, 2024 |
| Suse | — | Upgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-livepatch-develUpgrade kernel-default-livepatch-develUpgrade dtb-appleUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-obs-qaUpgrade kernel-rt-vdsoUpgrade dtb-broadcomUpgrade kernel-64kb-extraUpgrade kernel-syms-rtUpgrade dtb-marvellUpgrade kernel-macrosUpgrade kernel-obs-buildUpgrade kernel-rt-livepatch-develUpgrade dtb-armUpgrade kernel-rt-optionalUpgrade kernel-symsUpgrade kernel-default-baseUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-defaultUpgrade dtb-amlogicUpgrade reiserfs-kmp-defaultUpgrade dtb-socionextUpgrade kernel-defaultUpgrade reiserfs-kmp-rtUpgrade dtb-amdUpgrade dtb-apmUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt_debugUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-azure-extraUpgrade dtb-renesasUpgrade kernel-debug-develUpgrade cluster-md-kmp-defaultUpgrade kernel-default-extraUpgrade dtb-nvidiaUpgrade kernel-rt-extraUpgrade kernel-source-rtUpgrade kernel-docsUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade dtb-sprdUpgrade kernel-debugUpgrade kernel-azure-vdsoUpgrade dtb-hisiliconUpgrade kernel-64kb-livepatch-develUpgrade dtb-mediatekUpgrade kselftests-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade dtb-caviumUpgrade reiserfs-kmp-azureUpgrade dtb-exynosUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-devel-azureUpgrade gfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-azure-develUpgrade kernel-rt-livepatchUpgrade kernel-kvmsmallUpgrade dlm-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-default-develUpgrade dtb-xilinxUpgrade kernel-default-vdsoUpgrade dtb-amazonUpgrade dtb-rockchipUpgrade kernel-source-vanillaUpgrade kernel-rtUpgrade kernel-azureUpgrade kernel-rt-develUpgrade kernel-debug-vdsoUpgrade kernel-develUpgrade kernel-default-base-rebuildUpgrade kernel-devel-rtUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kernel-azure-optionalUpgrade dtb-qcomUpgrade dtb-lgUpgrade kernel-sourceUpgrade kernel-default-optionalUpgrade kernel-azure-livepatch-develUpgrade dtb-allwinnerUpgrade kselftests-kmp-64kbUpgrade kernel-64kbUpgrade dtb-alteraUpgrade kernel-source-azureUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-develUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-64kb | May 15, 2024 | May 1, 2024 |
| Ubuntu | — | Upgrade linux-image-oracle-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-5.15.0-112-genericUpgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-gke-5.15Upgrade linux-image-raspi2Upgrade linux-image-6.8.0-1009-awsUpgrade linux-image-gcpUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-oem-20.04cUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1040-iotUpgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-oem-24.04aUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-5.4.0-189-genericUpgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-awsUpgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-oem-osp1Upgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-oem-20.04dUpgrade linux-image-ibmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1006-oemUpgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-raspiUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-gkeop-5.4Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-35-genericUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-6.8.0-1008-azureUpgrade linux-image-bluefieldUpgrade linux-image-oem-24.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-oracleUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-intel-iotgUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-1128-awsUpgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-5.15.0-1066-azureUpgrade linux-image-genericUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-azureUpgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1063-awsUpgrade linux-image-5.15.0-113-genericUpgrade linux-image-oemUpgrade linux-image-oem-20.04Upgrade linux-image-gkeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gkeopUpgrade linux-image-intel | Jul 1, 2024 | May 1, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 1, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub