CVE-2024-53231

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw()

cpufreq_cpu_get_raw() may return NULL if the cpu is not in policy->cpus cpu mask and it will cause null pointer dereference.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

VendorProductVersions
LinuxLinux>= 740fcdc2c20ecf855b36b919d7fa1b872b5a7eae, < a357b63fd21e4b2791008c2175ba7a8c235ebce1; >= 740fcdc2c20ecf855b36b919d7fa1b872b5a7eae, < e07570a8f2cfc51260c6266cb8e1bd4777a610d6; >= 740fcdc2c20ecf855b36b919d7fa1b872b5a7eae, < e9b39f1924b76abc18881e4ce899fb232dd23d12; >= 740fcdc2c20ecf855b36b919d7fa1b872b5a7eae, < 65fe2f7fdafe2698a343661800434b3f2e51041e; >= 740fcdc2c20ecf855b36b919d7fa1b872b5a7eae, < a78e7207564258db6e373e86294a85f9d646d35a
LinuxLinux5.19

References

Timeline

Published
Dec 27, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-532325.5In the Linux kernel, the following vulnerability has been resolved: iommu/s390: Implement blocking domain This fixes a crash when surpriseCVE-2024-532335.5In the Linux kernel, the following vulnerability has been resolved: unicode: Fix utf8_load() error path utf8_load() requests the symbol "uCVE-2024-532345.5In the Linux kernel, the following vulnerability has been resolved: erofs: handle NONHEAD !delta[1] lclusters gracefully syzbot reported aCVE-2024-532355.5In the Linux kernel, the following vulnerability has been resolved: erofs: fix file-backed mounts over FUSE syzbot reported a null-ptr-derCVE-2024-532365.5In the Linux kernel, the following vulnerability has been resolved: xsk: Free skb when TX metadata options are invalid When a new skb is aCVE-2024-532377.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix use-after-free in device_for_each_child() Syzbot has reCVE-2024-532385.5In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtk: adjust the position to init iso data anchor MediaTekCVE-2024-532397.8In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: Release resources at card release The current 6fire code CVE-2024-53248.8Multiple plugins for WordPress utilizing the XootiX Framework are vulnerable to unauthorized modification of data due to a missing capabilitCVE-2024-532405.7In the Linux kernel, the following vulnerability has been resolved: xen/netfront: fix crash when removing device When removing a netfront CVE-2024-532415.5In the Linux kernel, the following vulnerability has been resolved: x86/xen: don't do PV iret hypercall through hypercall page Instead of CVE-2024-532427.8A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versi