NetSight
IP …
medium5.5

CVE-2024-27037

In the Linux kernel, the following vulnerability has been resolved: clk: zynq: Prevent null pointer dereference caused by kmalloc failure The kmalloc() in zynq…

Impact

In the Linux kernel, the following vulnerability has been resolved: clk: zynq: Prevent null pointer dereference caused by kmalloc failure The kmalloc() in zynq_clk_setup() will return null if the physical memory has run out. As a result, if we use snprintf() to write data to the null address, the null pointer dereference bug will happen. This patch uses a stack variable to replace the kmalloc().

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.11 before 5.15.153
from 5.16 before 6.1.83
from 6.2 before 6.6.23
from 6.7 before 6.7.11
from 6.8 before 6.8.2

Weakness classification

CWE-476

References