CVE-2024-58066

clk: mmp: pxa1908-apbcp: Fix a NULL vs IS_ERR() check

State: Published
Severity: 5.5 Medium
Published: Mar 6, 2025
Updated: May 11, 2026
Reserved: Mar 6, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

clk: mmp: pxa1908-apbcp: Fix a NULL vs IS_ERR() check

The devm_kzalloc() function doesn't return error pointers, it returns NULL on error. Update the check to match.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	a89233dbd4df521094caa0dbcd03338259f8ead6 to before 2b3a36fb572caf9fb72f158be328395b1c938bf7Affected a89233dbd4df521094caa0dbcd03338259f8ead6 to before 3acea81be689b77b3ceac6ff345ff0366734d967Affected
LinuxLinux	6.13Affected before 6.13Not affected 6.13.2 through 6.13.*Not affected 6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.