In the Linux kernel, the following vulnerability has been resolved:
clk: sunxi-ng: common: Don't call hw_to_ccu_common on hw without common
In order to set the rate range of a hw sunxi_ccu_probe calls hw_to_ccu_common() assuming all entries in desc->ccu_clks are contained in a ccu_common struct. This assumption is incorrect and, in consequence, causes invalid pointer de-references.
Remove the faulty call. Instead, add one more loop that iterates over the ccu_clks and sets the rate range, if required.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Ubuntu | — | Upgrade linux-image-oem-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-48-genericUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-nvidia-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-kvmUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-ibmUpgrade linux-image-gcpUpgrade linux-image-gkeop-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-genericUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-oem-22.04cUpgrade linux-image-raspiUpgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-awsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1016-azure-fde | Nov 4, 2024 | Jul 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub