← Database

CVE-2024-38573

HIGH CVSS: 7.5 Published: 2024-06-19 Modified: 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: cppc_cpufreq: Fix possible null pointer dereference cppc_cpufreq_get_rate() and hisi_cppc_cpufreq_get_rate() can be called from different places with various parameters. So cpufreq_cpu_get() can return null as 'policy' in some circumstances. Fix this bug by adding null return check. Found by Linux Verification Center (linuxtesting.org) with SVACE.

Affected Platforms

Linux Linux Kernel

Weakness Type

CWE-476

References