CVE-2024-27038

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> clk: Fix clk_core_get NULL dereference<br /> <br /> It is possible for clk_core_get to dereference a NULL in the following<br /> sequence:<br /> <br /> clk_core_get()<br /> of_clk_get_hw_from_clkspec()<br /> __of_clk_get_hw_from_provider()<br /> __clk_get_hw()<br /> <br /> __clk_get_hw() can return NULL which is dereferenced by clk_core_get() at<br /> hw-&gt;core.<br /> <br /> Prior to commit dde4eff47c82 ("clk: Look for parents with clkdev based<br /> clk_lookups") the check IS_ERR_OR_NULL() was performed which would have<br /> caught the NULL.<br /> <br /> Reading the description of this function it talks about returning NULL but<br /> that cannot be so at the moment.<br /> <br /> Update the function to check for hw before dereferencing it and return NULL<br /> if hw is NULL.