CVE-2024-58081
Severity CVSS v4.0:
Pending analysis
Type:
CWE-476
NULL Pointer Dereference
Publication date:
06/03/2025
Last modified:
01/10/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
clk: mmp2: call pm_genpd_init() only after genpd.name is set<br />
<br />
Setting the genpd&#39;s struct device&#39;s name with dev_set_name() is<br />
happening within pm_genpd_init(). If it remains NULL, things can blow up<br />
later, such as when crafting the devfs hierarchy for the power domain:<br />
<br />
Unable to handle kernel NULL pointer dereference at virtual address 00000000 when read<br />
...<br />
Call trace:<br />
strlen from start_creating+0x90/0x138<br />
start_creating from debugfs_create_dir+0x20/0x178<br />
debugfs_create_dir from genpd_debug_add.part.0+0x4c/0x144<br />
genpd_debug_add.part.0 from genpd_debug_init+0x74/0x90<br />
genpd_debug_init from do_one_initcall+0x5c/0x244<br />
do_one_initcall from kernel_init_freeable+0x19c/0x1f4<br />
kernel_init_freeable from kernel_init+0x1c/0x12c<br />
kernel_init from ret_from_fork+0x14/0x28<br />
<br />
Bisecting tracks this crash back to commit 899f44531fe6 ("pmdomain: core:<br />
Add GENPD_FLAG_DEV_NAME_FW flag"), which exchanges use of genpd->name<br />
with dev_name(&genpd->dev) in genpd_debug_add.part().
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.11.10 (including) | 6.12.14 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.13 (including) | 6.13.3 (excluding) |
To consult the complete list of CPE names with products and versions, see this page



