CVE-2024-53231

cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw()

State: Published
Severity: 5.5 Medium
Published: Dec 27, 2024
Updated: May 11, 2026
Reserved: Nov 19, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw()

cpufreq_cpu_get_raw() may return NULL if the cpu is not in policy->cpus cpu mask and it will cause null pointer dereference.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	740fcdc2c20ecf855b36b919d7fa1b872b5a7eae to before a357b63fd21e4b2791008c2175ba7a8c235ebce1Affected 740fcdc2c20ecf855b36b919d7fa1b872b5a7eae to before e07570a8f2cfc51260c6266cb8e1bd4777a610d6Affected 740fcdc2c20ecf855b36b919d7fa1b872b5a7eae to before e9b39f1924b76abc18881e4ce899fb232dd23d12Affected 740fcdc2c20ecf855b36b919d7fa1b872b5a7eae to before 65fe2f7fdafe2698a343661800434b3f2e51041eAffected 740fcdc2c20ecf855b36b919d7fa1b872b5a7eae to before a78e7207564258db6e373e86294a85f9d646d35aAffected
LinuxLinux	5.19Affected before 5.19Not affected 6.1.120 through 6.1.Not affected 6.6.64 through 6.6.Not affected 6.11.11 through 6.11.Not affected 6.12.2 through 6.12.Not affected 6.13 and laterNot affected

Product

Versions

LinuxLinux

740fcdc2c20ecf855b36b919d7fa1b872b5a7eae to before a357b63fd21e4b2791008c2175ba7a8c235ebce1Affected
740fcdc2c20ecf855b36b919d7fa1b872b5a7eae to before e07570a8f2cfc51260c6266cb8e1bd4777a610d6Affected
740fcdc2c20ecf855b36b919d7fa1b872b5a7eae to before e9b39f1924b76abc18881e4ce899fb232dd23d12Affected
740fcdc2c20ecf855b36b919d7fa1b872b5a7eae to before 65fe2f7fdafe2698a343661800434b3f2e51041eAffected
740fcdc2c20ecf855b36b919d7fa1b872b5a7eae to before a78e7207564258db6e373e86294a85f9d646d35aAffected

LinuxLinux

5.19Affected
before 5.19Not affected
6.1.120 through 6.1.*Not affected
6.6.64 through 6.6.*Not affected
6.11.11 through 6.11.*Not affected
6.12.2 through 6.12.*Not affected
6.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.