CVE-2024-53230

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2024-53230
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-53230.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-53230
Downstream
Related
Published
2024-12-27T13:50:18Z
Modified
2025-10-17T18:10:54.275097Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost()
Details

In the Linux kernel, the following vulnerability has been resolved:

cpufreq: CPPC: Fix possible null-ptr-deref for cppcgetcpu_cost()

cpufreqcpugetraw() may return NULL if the cpu is not in policy->cpus cpu mask and it will cause null pointer dereference, so check NULL for cppcgetcpucost().

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
740fcdc2c20ecf855b36b919d7fa1b872b5a7eae
Fixed
1975b481f644f8f841d9c188e3c214fce187f18b
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
740fcdc2c20ecf855b36b919d7fa1b872b5a7eae
Fixed
f05ef81db63889f6f14eb77fd140dac6cedb6f7f
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
740fcdc2c20ecf855b36b919d7fa1b872b5a7eae
Fixed
afd22d9839359829776abb55cc9bc4946e888704
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
740fcdc2c20ecf855b36b919d7fa1b872b5a7eae
Fixed
6be57617a38b3f33266acecdb3c063c1c079aaf7
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
740fcdc2c20ecf855b36b919d7fa1b872b5a7eae
Fixed
1a1374bb8c5926674973d849feed500bc61ad535

Affected versions

v5.*

v5.18
v5.18-rc5
v5.18-rc6
v5.18-rc7
v5.19
v5.19-rc1
v5.19-rc2
v5.19-rc3
v5.19-rc4
v5.19-rc5
v5.19-rc6
v5.19-rc7
v5.19-rc8

v6.*

v6.0
v6.0-rc1
v6.0-rc2
v6.0-rc3
v6.0-rc4
v6.0-rc5
v6.0-rc6
v6.0-rc7
v6.1
v6.1-rc1
v6.1-rc2
v6.1-rc3
v6.1-rc4
v6.1-rc5
v6.1-rc6
v6.1-rc7
v6.1-rc8
v6.1.1
v6.1.10
v6.1.100
v6.1.101
v6.1.102
v6.1.103
v6.1.104
v6.1.105
v6.1.106
v6.1.107
v6.1.108
v6.1.109
v6.1.11
v6.1.110
v6.1.111
v6.1.112
v6.1.113
v6.1.114
v6.1.115
v6.1.116
v6.1.117
v6.1.118
v6.1.119
v6.1.12
v6.1.13
v6.1.14
v6.1.15
v6.1.16
v6.1.17
v6.1.18
v6.1.19
v6.1.2
v6.1.20
v6.1.21
v6.1.22
v6.1.23
v6.1.24
v6.1.25
v6.1.26
v6.1.27
v6.1.28
v6.1.29
v6.1.3
v6.1.30
v6.1.31
v6.1.32
v6.1.33
v6.1.34
v6.1.35
v6.1.36
v6.1.37
v6.1.38
v6.1.39
v6.1.4
v6.1.40
v6.1.41
v6.1.42
v6.1.43
v6.1.44
v6.1.45
v6.1.46
v6.1.47
v6.1.48
v6.1.49
v6.1.5
v6.1.50
v6.1.51
v6.1.52
v6.1.53
v6.1.54
v6.1.55
v6.1.56
v6.1.57
v6.1.58
v6.1.59
v6.1.6
v6.1.60
v6.1.61
v6.1.62
v6.1.63
v6.1.64
v6.1.65
v6.1.66
v6.1.67
v6.1.68
v6.1.69
v6.1.7
v6.1.70
v6.1.71
v6.1.72
v6.1.73
v6.1.74
v6.1.75
v6.1.76
v6.1.77
v6.1.78
v6.1.79
v6.1.8
v6.1.80
v6.1.81
v6.1.82
v6.1.83
v6.1.84
v6.1.85
v6.1.86
v6.1.87
v6.1.88
v6.1.89
v6.1.9
v6.1.90
v6.1.91
v6.1.92
v6.1.93
v6.1.94
v6.1.95
v6.1.96
v6.1.97
v6.1.98
v6.1.99
v6.10
v6.10-rc1
v6.10-rc2
v6.10-rc3
v6.10-rc4
v6.10-rc5
v6.10-rc6
v6.10-rc7
v6.11
v6.11-rc1
v6.11-rc2
v6.11-rc3
v6.11-rc4
v6.11-rc5
v6.11-rc6
v6.11-rc7
v6.11.1
v6.11.10
v6.11.2
v6.11.3
v6.11.4
v6.11.5
v6.11.6
v6.11.7
v6.11.8
v6.11.9
v6.12
v6.12-rc1
v6.12-rc2
v6.12-rc3
v6.12-rc4
v6.12-rc5
v6.12-rc6
v6.12-rc7
v6.12.1
v6.2
v6.2-rc1
v6.2-rc2
v6.2-rc3
v6.2-rc4
v6.2-rc5
v6.2-rc6
v6.2-rc7
v6.2-rc8
v6.3
v6.3-rc1
v6.3-rc2
v6.3-rc3
v6.3-rc4
v6.3-rc5
v6.3-rc6
v6.3-rc7
v6.4
v6.4-rc1
v6.4-rc2
v6.4-rc3
v6.4-rc4
v6.4-rc5
v6.4-rc6
v6.4-rc7
v6.5
v6.5-rc1
v6.5-rc2
v6.5-rc3
v6.5-rc4
v6.5-rc5
v6.5-rc6
v6.5-rc7
v6.6
v6.6-rc1
v6.6-rc2
v6.6-rc3
v6.6-rc4
v6.6-rc5
v6.6-rc6
v6.6-rc7
v6.6.1
v6.6.10
v6.6.11
v6.6.12
v6.6.13
v6.6.14
v6.6.15
v6.6.16
v6.6.17
v6.6.18
v6.6.19
v6.6.2
v6.6.20
v6.6.21
v6.6.22
v6.6.23
v6.6.24
v6.6.25
v6.6.26
v6.6.27
v6.6.28
v6.6.29
v6.6.3
v6.6.30
v6.6.31
v6.6.32
v6.6.33
v6.6.34
v6.6.35
v6.6.36
v6.6.37
v6.6.38
v6.6.39
v6.6.4
v6.6.40
v6.6.41
v6.6.42
v6.6.43
v6.6.44
v6.6.45
v6.6.46
v6.6.47
v6.6.48
v6.6.49
v6.6.5
v6.6.50
v6.6.51
v6.6.52
v6.6.53
v6.6.54
v6.6.55
v6.6.56
v6.6.57
v6.6.58
v6.6.59
v6.6.6
v6.6.60
v6.6.61
v6.6.62
v6.6.63
v6.6.7
v6.6.8
v6.6.9
v6.7
v6.7-rc1
v6.7-rc2
v6.7-rc3
v6.7-rc4
v6.7-rc5
v6.7-rc6
v6.7-rc7
v6.7-rc8
v6.8
v6.8-rc1
v6.8-rc2
v6.8-rc3
v6.8-rc4
v6.8-rc5
v6.8-rc6
v6.8-rc7
v6.9
v6.9-rc1
v6.9-rc2
v6.9-rc3
v6.9-rc4
v6.9-rc5
v6.9-rc6
v6.9-rc7

Database specific

vanir_signatures

[
    {
        "digest": {
            "function_hash": "256686956322331159138143619199402538154",
            "length": 465.0
        },
        "target": {
            "function": "cppc_get_cpu_cost",
            "file": "drivers/cpufreq/cppc_cpufreq.c"
        },
        "id": "CVE-2024-53230-06abebcf",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@afd22d9839359829776abb55cc9bc4946e888704",
        "signature_version": "v1",
        "signature_type": "Function",
        "deprecated": false
    },
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "337900066270880399670036239299298911081",
                "45150521857311673413692240560313974524",
                "230227380078697170288679810983252855782",
                "147316740376322919711945982932187982715"
            ]
        },
        "target": {
            "file": "drivers/cpufreq/cppc_cpufreq.c"
        },
        "id": "CVE-2024-53230-0f40c0f5",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6be57617a38b3f33266acecdb3c063c1c079aaf7",
        "signature_version": "v1",
        "signature_type": "Line",
        "deprecated": false
    },
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "337900066270880399670036239299298911081",
                "45150521857311673413692240560313974524",
                "230227380078697170288679810983252855782",
                "147316740376322919711945982932187982715"
            ]
        },
        "target": {
            "file": "drivers/cpufreq/cppc_cpufreq.c"
        },
        "id": "CVE-2024-53230-20549125",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1975b481f644f8f841d9c188e3c214fce187f18b",
        "signature_version": "v1",
        "signature_type": "Line",
        "deprecated": false
    },
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "337900066270880399670036239299298911081",
                "45150521857311673413692240560313974524",
                "230227380078697170288679810983252855782",
                "147316740376322919711945982932187982715"
            ]
        },
        "target": {
            "file": "drivers/cpufreq/cppc_cpufreq.c"
        },
        "id": "CVE-2024-53230-259fa11f",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1a1374bb8c5926674973d849feed500bc61ad535",
        "signature_version": "v1",
        "signature_type": "Line",
        "deprecated": false
    },
    {
        "digest": {
            "function_hash": "256686956322331159138143619199402538154",
            "length": 465.0
        },
        "target": {
            "function": "cppc_get_cpu_cost",
            "file": "drivers/cpufreq/cppc_cpufreq.c"
        },
        "id": "CVE-2024-53230-537eb304",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1a1374bb8c5926674973d849feed500bc61ad535",
        "signature_version": "v1",
        "signature_type": "Function",
        "deprecated": false
    },
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "337900066270880399670036239299298911081",
                "45150521857311673413692240560313974524",
                "230227380078697170288679810983252855782",
                "147316740376322919711945982932187982715"
            ]
        },
        "target": {
            "file": "drivers/cpufreq/cppc_cpufreq.c"
        },
        "id": "CVE-2024-53230-76508715",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f05ef81db63889f6f14eb77fd140dac6cedb6f7f",
        "signature_version": "v1",
        "signature_type": "Line",
        "deprecated": false
    },
    {
        "digest": {
            "function_hash": "256686956322331159138143619199402538154",
            "length": 465.0
        },
        "target": {
            "function": "cppc_get_cpu_cost",
            "file": "drivers/cpufreq/cppc_cpufreq.c"
        },
        "id": "CVE-2024-53230-960e0165",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f05ef81db63889f6f14eb77fd140dac6cedb6f7f",
        "signature_version": "v1",
        "signature_type": "Function",
        "deprecated": false
    },
    {
        "digest": {
            "function_hash": "256686956322331159138143619199402538154",
            "length": 465.0
        },
        "target": {
            "function": "cppc_get_cpu_cost",
            "file": "drivers/cpufreq/cppc_cpufreq.c"
        },
        "id": "CVE-2024-53230-ea6ef25b",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6be57617a38b3f33266acecdb3c063c1c079aaf7",
        "signature_version": "v1",
        "signature_type": "Function",
        "deprecated": false
    },
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "337900066270880399670036239299298911081",
                "45150521857311673413692240560313974524",
                "230227380078697170288679810983252855782",
                "147316740376322919711945982932187982715"
            ]
        },
        "target": {
            "file": "drivers/cpufreq/cppc_cpufreq.c"
        },
        "id": "CVE-2024-53230-eb769351",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@afd22d9839359829776abb55cc9bc4946e888704",
        "signature_version": "v1",
        "signature_type": "Line",
        "deprecated": false
    },
    {
        "digest": {
            "function_hash": "256686956322331159138143619199402538154",
            "length": 465.0
        },
        "target": {
            "function": "cppc_get_cpu_cost",
            "file": "drivers/cpufreq/cppc_cpufreq.c"
        },
        "id": "CVE-2024-53230-f6947569",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1975b481f644f8f841d9c188e3c214fce187f18b",
        "signature_version": "v1",
        "signature_type": "Function",
        "deprecated": false
    }
]

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.19.0
Fixed
6.1.120
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.64
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.11.11
Type
ECOSYSTEM
Events
Introduced
6.12.0
Fixed
6.12.2