NetSight
IP …
medium5.5

CVE-2024-42100

In the Linux kernel, the following vulnerability has been resolved: clk: sunxi-ng: common: Don't call hw_to_ccu_common on hw without common In order to set the…

Impact

In the Linux kernel, the following vulnerability has been resolved: clk: sunxi-ng: common: Don't call hw_to_ccu_common on hw without common In order to set the rate range of a hw sunxi_ccu_probe calls hw_to_ccu_common() assuming all entries in desc->ccu_clks are contained in a ccu_common struct. This assumption is incorrect and, in consequence, causes invalid pointer de-references. Remove the faulty call. Instead, add one more loop that iterates over the ccu_clks and sets the rate range, if required.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 6.6.31 before 6.6.39
from 6.8.10 before 6.9
from 6.9.1 before 6.9.9
Versions 6.9, 6.10

Weakness classification

CWE-476

References