Skip to main content
← All vulnerabilities
CVE-2024-38615

cpufreq: exit() callback is optional

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 5.4.278, 5.10.219, 5.15.161, 6.1.93, 6.6.33, and 2 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: partial

Summary

In the Linux kernel, the following vulnerability has been resolved: cpufreq: exit() callback is optional The exit() callback is optional and shouldn't be called without checking a valid pointer first. Also, we must clear freq_table pointer even if the exit() callback isn't present.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: partial

  3. Record last updated

Affected versions

  • Linux Linux

    From 91a12e91dc39137906d929a4ff6f9c32c59697fa · fixed in 2d730b465e377396d2a09a53524b96b111f7ccb6; From 91a12e91dc39137906d929a4ff6f9c32c59697fa · fixed in dfc56ff5ec9904c008e9376d90a6d7e2d2bec4d3; From 91a12e91dc39137906d929a4ff6f9c32c59697fa · fixed in 35db5e76d5e9f752476df5fa0b9018a2398b0378; From 91a12e91dc39137906d929a4ff6f9c32c59697fa · fixed in 8bc9546805e572ad101681437a49939f28777273; From 91a12e91dc39137906d929a4ff6f9c32c59697fa · fixed in 3e99f060cfd2e36504d62c9132b453ade5027e1c; From 91a12e91dc39137906d929a4ff6f9c32c59697fa · fixed in ae37ebca325097d773d7bb6ec069123b30772872; From 91a12e91dc39137906d929a4ff6f9c32c59697fa · fixed in a8204d1b6ff762d2171d365c2c8560285d0a233d; From 91a12e91dc39137906d929a4ff6f9c32c59697fa · fixed in b8f85833c05730d631576008daaa34096bc7f3ce

  • Linux Linux

    5.1

  • KernelLinux

    From 5.1.0 · fixed in 5.4.278; From 5.5.0 · fixed in 5.10.219; From 5.11.0 · fixed in 5.15.161; From 5.16.0 · fixed in 6.1.93; From 6.2.0 · fixed in 6.6.33; From 6.7.0 · fixed in 6.8.12; From 6.9.0 · fixed in 6.9.3

References 8

git.kernel.org