CVE-2024-26879

Source
https://cve.org/CVERecord?id=CVE-2024-26879
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-26879.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-26879
Downstream
Related
Published
2024-04-17T10:27:36.466Z
Modified
2026-06-18T03:55:16.399079408Z
Summary
clk: meson: Add missing clocks to axg_clk_regmaps
Details

In the Linux kernel, the following vulnerability has been resolved:

clk: meson: Add missing clocks to axgclkregmaps

Some clocks were missing from axgclkregmaps, which caused kernel panic during cat /sys/kernel/debug/clk/clk_summary

[ 57.349402] Unable to handle kernel NULL pointer dereference at virtual address 00000000000001fc ... [ 57.430002] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 57.436900] pc : regmapread+0x1c/0x88 [ 57.440608] lr : clkregmapgateisenabled+0x3c/0xb0 [ 57.445611] sp : ffff800082f1b690 [ 57.448888] x29: ffff800082f1b690 x28: 0000000000000000 x27: ffff800080eb9a70 [ 57.455961] x26: 0000000000000007 x25: 0000000000000016 x24: 0000000000000000 [ 57.463033] x23: ffff800080e8b488 x22: 0000000000000015 x21: ffff00000e7e7000 [ 57.470106] x20: ffff00000400ec00 x19: 0000000000000000 x18: ffffffffffffffff [ 57.477178] x17: 0000000000000000 x16: 0000000000000000 x15: ffff0000042a3000 [ 57.484251] x14: 0000000000000000 x13: ffff0000042a2fec x12: 0000000005f5e100 [ 57.491323] x11: abcc77118461cefd x10: 0000000000000020 x9 : ffff8000805e4b24 [ 57.498396] x8 : ffff0000028063c0 x7 : ffff800082f1b710 x6 : ffff800082f1b710 [ 57.505468] x5 : 00000000ffffffd0 x4 : ffff800082f1b6e0 x3 : 0000000000001000 [ 57.512541] x2 : ffff800082f1b6e4 x1 : 000000000000012c x0 : 0000000000000000 [ 57.519615] Call trace: [ 57.522030] regmapread+0x1c/0x88 [ 57.525393] clkregmapgateisenabled+0x3c/0xb0 [ 57.530050] clkcoreisenabled+0x44/0x120 [ 57.534190] clksummaryshowsubtree+0x154/0x2f0 [ 57.538847] clksummaryshowsubtree+0x220/0x2f0 [ 57.543505] clksummaryshowsubtree+0x220/0x2f0 [ 57.548162] clksummaryshowsubtree+0x220/0x2f0 [ 57.552820] clksummaryshowsubtree+0x220/0x2f0 [ 57.557477] clksummaryshowsubtree+0x220/0x2f0 [ 57.562135] clksummaryshowsubtree+0x220/0x2f0 [ 57.566792] clksummaryshowsubtree+0x220/0x2f0 [ 57.571450] clksummaryshow+0x84/0xb8 [ 57.575245] seqreaditer+0x1bc/0x4b8 [ 57.578954] seqread+0x8c/0xd0 [ 57.582059] fullproxyread+0x68/0xc8 [ 57.585767] vfsread+0xb0/0x268 [ 57.588959] ksysread+0x70/0x108 [ 57.592236] _arm64sysread+0x24/0x38 [ 57.596031] invokesyscall+0x50/0x128 [ 57.599740] el0svccommon.constprop.0+0x48/0xf8 [ 57.604397] doel0svc+0x28/0x40 [ 57.607675] el0svc+0x34/0xb8 [ 57.610694] el0t64synchandler+0x13c/0x158 [ 57.615006] el0t64sync+0x190/0x198 [ 57.618635] Code: a9bd7bfd 910003fd a90153f3 aa0003f3 (b941fc00) [ 57.624668] ---[ end trace 0000000000000000 ]---

[jbrunet: add missing Fixes tag]

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/26xxx/CVE-2024-26879.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
14ebb3154b8f3d562cb18331b08ff1a22609ae59
Fixed
a03ed00787b0ce7a83eebabd0fa95ecc4a5cac84
Fixed
7ae1b0dc12ec407f12f80b49d22c6ad2308e2202
Fixed
0cbefc7b5bdad86b18a263d837450cdc9a56f8d7
Fixed
a860aaebacbc908fa06e2642402058f40bfffe10
Fixed
9f3e5df38b4528213449e55b80f0316864f2a1c8
Fixed
ba535bce57e71463a86f8b33a0ea88c26e3a6418

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-26879.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.153
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.83
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.23
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.7.11
Type
ECOSYSTEM
Events
Introduced
6.8.0
Fixed
6.8.2

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-26879.json"