CVE-2024-38615

MediumCVSS 5.5/10Last modified Oct 15, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

cpufreq: exit() callback is optional

The exit() callback is optional and shouldn't be called without checking a valid pointer first.

Also, we must clear freq_table pointer even if the exit() callback isn't present.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

VendorProductVersions
LinuxLinux>= 91a12e91dc39137906d929a4ff6f9c32c59697fa, < 2d730b465e377396d2a09a53524b96b111f7ccb6; >= 91a12e91dc39137906d929a4ff6f9c32c59697fa, < dfc56ff5ec9904c008e9376d90a6d7e2d2bec4d3; >= 91a12e91dc39137906d929a4ff6f9c32c59697fa, < 35db5e76d5e9f752476df5fa0b9018a2398b0378; >= 91a12e91dc39137906d929a4ff6f9c32c59697fa, < 8bc9546805e572ad101681437a49939f28777273; >= 91a12e91dc39137906d929a4ff6f9c32c59697fa, < 3e99f060cfd2e36504d62c9132b453ade5027e1c; >= 91a12e91dc39137906d929a4ff6f9c32c59697fa, < ae37ebca325097d773d7bb6ec069123b30772872; >= 91a12e91dc39137906d929a4ff6f9c32c59697fa, < a8204d1b6ff762d2171d365c2c8560285d0a233d; >= 91a12e91dc39137906d929a4ff6f9c32c59697fa, < b8f85833c05730d631576008daaa34096bc7f3ce
LinuxLinux5.1
SiemensRUGGEDCOM RST2428P< V3.1
SiemensSCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family—
SiemensSCALANCE XCM-/XRM-/XCH-/XRH-300 family< V3.1
SiemensSIMATIC S7-1500 TM MFP - GNU/Linux subsystem< V1.1.1

References

Timeline

Published
Jun 19, 2024
Last modified
Oct 15, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-386168.2In the Linux kernel, the following vulnerability has been resolved: wifi: carl9170: re-fix fortified-memset warning The carl9170_tx_releasCVE-2024-386175.5In the Linux kernel, the following vulnerability has been resolved: kunit/fortify: Fix mismatched kvalloc()/vfree() usage The kv*() familyCVE-2024-386185.5In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: Set lower bound of start tick time Currently ALSA timer dCVE-2024-386195.5In the Linux kernel, the following vulnerability has been resolved: usb-storage: alauda: Check whether the media is initialized The memberCVE-2024-38625.3The MarkStack assignment operator, part of the JavaScript engine, could access uninitialized memory if it were used in a self-assignment. ThCVE-2024-386205.5In the Linux kernel, the following vulnerability has been resolved: Bluetooth: HCI: Remove HCI_AMP support Since BT_HS has been remove HCICVE-2024-386217.1In the Linux kernel, the following vulnerability has been resolved: media: stk1160: fix bounds checking in stk1160_copy_video() The subtraCVE-2024-386225.5In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Add callback function pointer check before its call In dpCVE-2024-386237.8In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Use variable length array instead of fixed size Should fix sCVE-2024-386245.5In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow For example, inCVE-2024-386255.5In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Check 'folio' pointer for NULL It can be NULL if bmap is calCVE-2024-386265.5In the Linux kernel, the following vulnerability has been resolved: fuse: clear FR_SENT when re-adding requests into pending list The foll