Lucene search

K
redhatcveRedhat.comRH:CVE-2024-27037
HistoryMay 01, 2024 - 9:24 p.m.

CVE-2024-27037

2024-05-0121:24:33
redhat.com
access.redhat.com
5
linux kernel
cve-2024-27037
vulnerability
null pointer dereference
zynq_clk_setup
fix
prevention

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.3%

In the Linux kernel, the following vulnerability has been resolved: clk: zynq: Prevent null pointer dereference caused by kmalloc failure The kmalloc() in zynq_clk_setup() will return null if the physical memory has run out. As a result, if we use snprintf() to write data to the null address, the null pointer dereference bug will happen. This patch uses a stack variable to replace the kmalloc().

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.3%