Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2024-27037
HistoryMay 01, 2024 - 1:15 p.m.

CVE-2024-27037

2024-05-0113:15:49
Debian Security Bug Tracker
security-tracker.debian.org
5
linux kernel
vulnerability
zynq_clk_setup
null pointer
dereference
kmalloc
patch

6.3 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.3%

In the Linux kernel, the following vulnerability has been resolved: clk: zynq: Prevent null pointer dereference caused by kmalloc failure The kmalloc() in zynq_clk_setup() will return null if the physical memory has run out. As a result, if we use snprintf() to write data to the null address, the null pointer dereference bug will happen. This patch uses a stack variable to replace the kmalloc().

6.3 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.3%