SUSE CVE-2024-27038

In the Linux kernel, the following vulnerability has been resolved: clk: Fix clkcoreget NULL dereference It is possible for clkcoreget to dereference a NULL in the following sequence: clkcoreget ofclkgethwfromclkspec ofclkgethwfromprovider clkgethw clkgethw can return NULL which is dereferenced b...

CVE-2024-27039

An erroneous devmkfree flaw was found in the Linux kernel in drivers/clk/hisilicon/clk-hi3559a.c. This issue may lead to a crash...

CVE-2024-26970

A vulnerability was found in the Linux Kernel's qcom gcc-ipq6018.c driver, where out-of-bounds access can occur when the frequency table arrays are traversed by functions like qcomfindfreq or qcomfindfreqfloor, as the arrays are not terminated with an empty element. This can lead to memory...

CVE-2024-26968

A vulnerability was found in the Linux Kernel's qcom gcc-ipq9574.c driver, where out-of-bounds access can occur when the frequency table arrays are traversed by functions like qcomfindfreq or qcomfindfreqfloor, as the arrays are not terminated with an empty element. This can lead to memory...

CVE-2024-26967

A vulnerability was found in the Linux Kernel's qcom camcc-sc8280xp.c driver, where out-of-bounds access can occur when the frequency table arrays are traversed by functions like qcomfindfreq or qcomfindfreqfloor, as the arrays are not terminated with an empty element. This can lead to memory...

CVE-2024-26965

A vulnerability was found in the Linux Kernel's qcom mmcc-msm8974.c driver, where out-of-bounds access can occur when the frequency table arrays are traversed by functions like qcomfindfreq or qcomfindfreqfloor as the arrays are not terminated with an empty element. This can lead to memory...

CVE-2024-27004

In the Linux kernel, the following vulnerability has been resolved: clk: Get runtime PM before walking tree during disableunused Doug reported 1 the following hung task: INFO: task swapper/0:1 blocked for more than 122 seconds. Not tainted 5.15.149-21875-gf795ebc40eb8 1 "echo 0...

CVE-2024-27002

The following vulnerability has been resolved in the Linux kernel: clk: mediatek: Fix - Do a runtime PM get on controllers during probe...

CVE-2024-27037

In the Linux kernel, the following vulnerability has been resolved: clk: zynq: Prevent null pointer dereference caused by kmalloc failure The kmalloc in zynqclksetup will return null if the physical memory has run out. As a result, if we use snprintf to write data to the null address, the null...

CVE-2024-27037

In the Linux kernel, the following vulnerability has been resolved: clk: zynq: Prevent null pointer dereference caused by kmalloc failure The kmalloc in zynqclksetup will return null if the physical memory has run out. As a result, if we use snprintf to write data to the null address, the null...

CVE-2024-27039

In the Linux kernel, the following vulnerability has been resolved: clk: hisilicon: hi3559a: Fix an erroneous devmkfree 'pclk' is an array allocated just before the for loop for all clk that need to be registered. It is incremented at each loop iteration. If a clkregister call fails, 'pclk' may...

CVE-2024-27039

The CVE-2024-27039 issue affects the Linux kernel clock framework for Hisilicon hi3559a. The root cause is an array p_clk that is allocated before iterating over clocks to register, and is incremented each loop iteration. If a clk_register() call fails, p_clk may point to memory that should not b...

CVE-2024-27039 clk: hisilicon: hi3559a: Fix an erroneous devm_kfree()

In the Linux kernel, the following vulnerability has been resolved: clk: hisilicon: hi3559a: Fix an erroneous devmkfree 'pclk' is an array allocated just before the for loop for all clk that need to be registered. It is incremented at each loop iteration. If a clkregister call fails, 'pclk' may...

CVE-2024-27039 clk: hisilicon: hi3559a: Fix an erroneous devm_kfree()

In the Linux kernel, the following vulnerability has been resolved: clk: hisilicon: hi3559a: Fix an erroneous devmkfree 'pclk' is an array allocated just before the for loop for all clk that need to be registered. It is incremented at each loop iteration. If a clkregister call fails, 'pclk' may...

CVE-2024-27038

The CVE-2024-27038 issue is a NULL dereference in clk_core_get() during hw dereferencing of clk->core. A NULL hw is produced when __clk_get_hw() returns NULL, and clk_core_get() dereferences hw->core. The fix, described in the kernel patch and reflected in Astra Linux/IBM advisories, change...

CVE-2024-27038 clk: Fix clk_core_get NULL dereference

In the Linux kernel, the following vulnerability has been resolved: clk: Fix clkcoreget NULL dereference It is possible for clkcoreget to dereference a NULL in the following sequence: clkcoreget ofclkgethwfromclkspec ofclkgethwfromprovider clkgethw clkgethw can return NULL which is dereferenced b...

CVE-2024-27037 clk: zynq: Prevent null pointer dereference caused by kmalloc failure

In the Linux kernel, the following vulnerability has been resolved: clk: zynq: Prevent null pointer dereference caused by kmalloc failure The kmalloc in zynqclksetup will return null if the physical memory has run out. As a result, if we use snprintf to write data to the null address, the null...

DEBIAN-CVE-2024-27003

In the Linux kernel, the following vulnerability has been resolved: clk: Get runtime PM before walking tree for clksummary Similar to the previous commit, we should make sure that all devices are runtime resumed before printing the clksummary through debugfs. Failure to do so would result in a...

CVE-2024-27004

In the Linux kernel, the following vulnerability has been resolved: clk: Get runtime PM before walking tree during disableunused Doug reported 1 the following hung task: INFO: task swapper/0:1 blocked for more than 122 seconds. Not tainted 5.15.149-21875-gf795ebc40eb8 1 "echo 0...

DEBIAN-CVE-2024-26965

In the Linux kernel, the following vulnerability has been resolved: clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays The frequency table arrays are supposed to be terminated with an empty element. Add such entry to the end of the arrays where it is missing in order to avoid...