Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2024-27037
HistoryMay 01, 2024 - 1:15 p.m.

CVE-2024-27037

2024-05-0113:15:49
Debian Security Bug Tracker
security-tracker.debian.org
9
linux kernel
vulnerability
zynq_clk_setup
null pointer
dereference
kmalloc
patch

AI Score

6.3

Confidence

Low

EPSS

0

Percentile

10.3%

In the Linux kernel, the following vulnerability has been resolved: clk: zynq: Prevent null pointer dereference caused by kmalloc failure The kmalloc() in zynq_clk_setup() will return null if the physical memory has run out. As a result, if we use snprintf() to write data to the null address, the null pointer dereference bug will happen. This patch uses a stack variable to replace the kmalloc().

AI Score

6.3

Confidence

Low

EPSS

0

Percentile

10.3%