Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost() cpufreq_cpu_get_raw() may return NULL if the cpu is not in policy->cpus cpu mask and it will cause null pointer dereference, so check NULL for cppc_get_cpu_cost().
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 5.19, < 6.1.120 |
Related Weaknesses (CWE)
References
- https://git.kernel.org/stable/c/1975b481f644f8f841d9c188e3c214fce187f18bPatch
- https://git.kernel.org/stable/c/1a1374bb8c5926674973d849feed500bc61ad535Patch
- https://git.kernel.org/stable/c/6be57617a38b3f33266acecdb3c063c1c079aaf7Patch
- https://git.kernel.org/stable/c/afd22d9839359829776abb55cc9bc4946e888704Patch
- https://git.kernel.org/stable/c/f05ef81db63889f6f14eb77fd140dac6cedb6f7fPatch
- https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html
FAQ
What is CVE-2024-53230?
CVE-2024-53230 is a vulnerability with a CVSS score of 5.5 (MEDIUM). In the Linux kernel, the following vulnerability has been resolved: cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost() cpufreq_cpu_get_raw() may return NULL if the cpu is not in poli...
How severe is CVE-2024-53230?
CVE-2024-53230 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-53230?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel.