CVE-2024-58081

Severity CVSS v4.0:
Pending analysis
Type:
CWE-476 NULL Pointer Dereference
Publication date:
06/03/2025
Last modified:
01/10/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> clk: mmp2: call pm_genpd_init() only after genpd.name is set<br /> <br /> Setting the genpd&amp;#39;s struct device&amp;#39;s name with dev_set_name() is<br /> happening within pm_genpd_init(). If it remains NULL, things can blow up<br /> later, such as when crafting the devfs hierarchy for the power domain:<br /> <br /> Unable to handle kernel NULL pointer dereference at virtual address 00000000 when read<br /> ...<br /> Call trace:<br /> strlen from start_creating+0x90/0x138<br /> start_creating from debugfs_create_dir+0x20/0x178<br /> debugfs_create_dir from genpd_debug_add.part.0+0x4c/0x144<br /> genpd_debug_add.part.0 from genpd_debug_init+0x74/0x90<br /> genpd_debug_init from do_one_initcall+0x5c/0x244<br /> do_one_initcall from kernel_init_freeable+0x19c/0x1f4<br /> kernel_init_freeable from kernel_init+0x1c/0x12c<br /> kernel_init from ret_from_fork+0x14/0x28<br /> <br /> Bisecting tracks this crash back to commit 899f44531fe6 ("pmdomain: core:<br /> Add GENPD_FLAG_DEV_NAME_FW flag"), which exchanges use of genpd-&gt;name<br /> with dev_name(&amp;genpd-&gt;dev) in genpd_debug_add.part().

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.11.10 (including) 6.12.14 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.13 (including) 6.13.3 (excluding)