CVE Feed

    Dashboard / CVE / CVE-2024-38573

    CVE-2024-38573

    In the Linux kernel, the following vulnerability has been resolved: cppc_cpufreq: Fix possible null pointer dereference cppc_cpufreq_get_rate() and hisi_cppc_cpufreq_get_rate() can be called from different places with various parameters. So cpufreq_cpu_get() can return null as 'policy' in some circumstances. Fix this bug by adding null return check. Found by Linux Verification Center (linuxtesting.org) with SVACE.

    Published:Jun 19, 2024
    Last Modified:May 4, 2025
    EPS:Jun 19, 2024
    EPSS Score:0.0004
    CVSS Score:7.5

    Affected Products

    Vendor
    Linux
    Product
    Acrn
    Vendor
    Linux
    Product
    Linux Kernel
    Vendor
    Redhat
    Product
    Enterprise Linux
    Vendor
    Redhat
    Product
    Rhel Eus

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-476 NULL Pointer Dereference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2024-38612 (CVSS 7) — In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix invalid unregister error pa…
    CVE-2024-27050 (CVSS 7.8) — In the Linux kernel, the following vulnerability has been resolved: libbpf: Use OPTS_SET() macro in bpf_xdp_q…
    CVE-2021-36143 (CVSS 7.5) — ACRN before 2.5 has a hw/pci/virtio/virtio.c vq_endchains NULL Pointer Dereference.…
    CVE-2021-36144 (CVSS 7.5) — The polling timer handler in ACRN before 2.5 has a use-after-free for a freed virtio device, related to device…
    CVE-2021-36145 (CVSS 7.5) — The Device Model in ACRN through 2.5 has a devicemodel/core/mem.c use-after-free for a freed rb_entry.…
    CVE-2021-36146 (CVSS 7.5) — ACRN before 2.5 has a devicemodel/hw/pci/xhci.c NULL Pointer Dereference for a trb pointer.…
    CVE-2021-36147 (CVSS 7.5) — An issue was discovered in ACRN before 2.5. It allows a devicemodel/hw/pci/virtio/virtio_net.c virtio_net_ping…
    CVE-2021-36148 (CVSS 7.8) — An issue was discovered in ACRN before 2.5. dmar_free_irte in hypervisor/arch/x86/vtd.c allows an irte_alloc_b…
    CVE-2019-18844 (CVSS 7.5) — The Device Model in ACRN before 2019w25.5-140000p relies on assert calls in devicemodel/hw/pci/core.c and devi…

    References

    https://git.kernel.org/stable/c/769c4f355b7962895205b86ad35617873feef9a5
    https://git.kernel.org/stable/c/9a185cc5a79ba408e1c73375706630662304f618
    https://git.kernel.org/stable/c/b18daa4ec727c0266de5bfc78e818d168cc4aedf
    https://git.kernel.org/stable/c/cf7de25878a1f4508c69dc9f6819c21ba177dbfe
    https://git.kernel.org/stable/c/dfec15222529d22b15e5b0d63572a9e39570cab4
    https://git.kernel.org/stable/c/f84b9b25d045e67a7eee5e73f21278c8ab06713c
    https://git.kernel.org/stable/c/769c4f355b7962895205b86ad35617873feef9a5
    https://git.kernel.org/stable/c/9a185cc5a79ba408e1c73375706630662304f618
    https://git.kernel.org/stable/c/b18daa4ec727c0266de5bfc78e818d168cc4aedf
    https://git.kernel.org/stable/c/cf7de25878a1f4508c69dc9f6819c21ba177dbfe
    https://git.kernel.org/stable/c/dfec15222529d22b15e5b0d63572a9e39570cab4
    https://git.kernel.org/stable/c/f84b9b25d045e67a7eee5e73f21278c8ab06713c

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High