CVE-2024-27038

clk: Fix clk_core_get NULL dereference

MEDIUM
5.5
CVSS Score
Published: May 1, 2024 at 12:53 PM UTC
Updated: October 15, 2026 at 01:17 AM UTC
3 products affected across 3 vendorsLinux KernelDebian LinuxSIMATIC S7-1500 TM MFP

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.3%
SSVC
No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: clk: Fix clk_core_get NULL dereference It is possible for clk_core_get to dereference a NULL in the following sequence: clk_core_get() of_clk_get_hw_from_clkspec() __of_clk_get_hw_from_provider() __clk_get_hw() __clk_get_hw() can return NULL which is dereferenced by clk_core_get() at hw->core. Prior to commit dde4eff47c82 ("clk: Look for parents with clkdev based clk_lookups") the check IS_ERR_OR_NULL() was performed which would have caught the NULL. Reading the description of this function it talks about returning NULL but that cannot be so at the moment. Update the function to check for hw before dereferencing it and return NULL if hw is NULL.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

5.11 ≤ v < 5.15.1535.16 ≤ v < 6.1.835.2 ≤ v < 5.4.2735.5 ≤ v < 5.10.2146.2 ≤ v < 6.6.236.7 ≤ v < 6.7.116.8 ≤ v < 6.8.25.2dde4eff47c82c52a72af333d9e55370eee6d95d6
Vendor states this is fixed in 0efb9ef6fb95384ba631d6819e66f10392aabfa2 (fixed)
Vendor states this is fixed in 239174535dba11f7b83de0eaaa27909024f8c185 (fixed)
Vendor states this is fixed in 6f073b24a9e2becd25ac4505a9780a87e621bb51 (fixed)
Vendor states this is fixed in a5d9b1aa61b401867b9066d54086b3e4ee91f8ed (fixed)
Vendor states this is fixed in a8b2b26fdd011ebe36d68a9a321ca45801685959 (fixed)
Vendor states this is fixed in c554badcae9c45b737a22d23454170c6020b90e6 (fixed)
Vendor states this is fixed in d7ae7d1265686b55832a445b1db8cdd69738ac07 (fixed)
Vendor states this is fixed in e97fe4901e0f59a0bfd524578fe3768f8ca42428 (fixed)
Vendor states this is fixed in 5.10.214 (unaffected)
Vendor states this is fixed in 5.15.153 (unaffected)
Vendor states this is fixed in 5.2 (unaffected)
Vendor states this is fixed in 5.4.273 (unaffected)
Vendor states this is fixed in 6.1.83 (unaffected)
Vendor states this is fixed in 6.6.23 (unaffected)
Vendor states this is fixed in 6.7.11 (unaffected)
Vendor states this is fixed in 6.8.2 (unaffected)
Vendor states this is fixed in 6.9 (unaffected)

References (10)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/0efb9ef6fb95384ba631d6819e66f10392aabfa2
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/239174535dba11f7b83de0eaaa27909024f8c185
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/6f073b24a9e2becd25ac4505a9780a87e621bb51
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/a5d9b1aa61b401867b9066d54086b3e4ee91f8ed
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/a8b2b26fdd011ebe36d68a9a321ca45801685959
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/c554badcae9c45b737a22d23454170c6020b90e6
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/d7ae7d1265686b55832a445b1db8cdd69738ac07
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/e97fe4901e0f59a0bfd524578fe3768f8ca42428

SSVC — Action Prioritization

SSVCNo known exploitNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-476

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card