CVE-2024-26784

Source
https://nvd.nist.gov/vuln/detail/CVE-2024-26784
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-26784.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-26784
Downstream
Published
2024-04-04T08:20:17.836Z
Modified
2025-11-27T02:33:48.831411Z
Summary
pmdomain: arm: Fix NULL dereference on scmi_perf_domain removal
Details

In the Linux kernel, the following vulnerability has been resolved:

pmdomain: arm: Fix NULL dereference on scmiperfdomain removal

On unloading of the scmiperfdomain module got the below splat, when in the DT provided to the system under test the '#power-domain-cells' property was missing. Indeed, this particular setup causes the probe to bail out early without giving any error, which leads to the ->remove() callback gets to run too, but without all the expected initialized structures in place.

Add a check and bail out early on remove too.

Call trace: scmiperfdomainremove+0x28/0x70 [scmiperfdomain] scmidevremove+0x28/0x40 [scmicore] deviceremove+0x54/0x90 devicereleasedriverinternal+0x1dc/0x240 driverdetach+0x58/0xa8 busremovedriver+0x78/0x108 driverunregister+0x38/0x70 scmidriverunregister+0x28/0x180 [scmicore] scmiperfdomaindriverexit+0x18/0xb78 [scmiperfdomain] _arm64sysdeletemodule+0x1a8/0x2c0 invokesyscall+0x50/0x128 el0svccommon.constprop.0+0x48/0xf0 doel0svc+0x24/0x38 el0svc+0x34/0xb8 el0t64synchandler+0x100/0x130 el0t64sync+0x190/0x198 Code: a90153f3 f9403c14 f9414800 955f8a05 (b9400a80) ---[ end trace 0000000000000000 ]---

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/blob/cc431b3424123d84bcd7afd4de150b33f117a8ef/cves/2024/26xxx/CVE-2024-26784.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
2af23ceb8624a419eaf40295c11fcb86ec9ee303
Fixed
f6aaf131e4d4a9a26040ecc018eb70ab8b3d355d
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
2af23ceb8624a419eaf40295c11fcb86ec9ee303
Fixed
eb5555d422d0fc325e1574a7353d3c616f82d8b5

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.7.9