CVE-2024-27037

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-27037
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-27037.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-27037
Downstream
Related
Published
2024-05-01T12:53:50.227Z
Modified
2026-05-28T03:55:27.612952065Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
clk: zynq: Prevent null pointer dereference caused by kmalloc failure
Details

In the Linux kernel, the following vulnerability has been resolved:

clk: zynq: Prevent null pointer dereference caused by kmalloc failure

The kmalloc() in zynqclksetup() will return null if the physical memory has run out. As a result, if we use snprintf() to write data to the null address, the null pointer dereference bug will happen.

This patch uses a stack variable to replace the kmalloc().

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/27xxx/CVE-2024-27037.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
0ee52b157b8ed88550ddd6291e54bb4bfabde364
Fixed
01511ac7be8e45f80e637f6bf61af2d3d2dee9db
Fixed
8c4889a9ea861d7be37463c10846eb75e1b49c9d
Fixed
0801c893fd48cdba66a3c8f44c3fe43cc67d3b85
Fixed
ca976c6a592f789700200069ef9052493c0b73d8
Fixed
58a946ab43501f2eba058d24d96af0ad1122475b
Fixed
7938e9ce39d6779d2f85d822cc930f73420e54a6

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-27037.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.11.0
Fixed
5.15.153
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.83
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.23
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.7.11
Type
ECOSYSTEM
Events
Introduced
6.8.0
Fixed
6.8.2

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-27037.json"