In the Linux kernel, the following vulnerability has been resolved: cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw() cpufreq_cpu_get_raw() may return NULL if the cpu is not in policy->cpus cpu mask and it will cause null pointer dereference.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

No data.

References
Link Providers
https://git.kernel.org/stable/c/65fe2f7fdafe2698a343661800434b3f2e51041e cve-icon cve-icon
https://git.kernel.org/stable/c/a357b63fd21e4b2791008c2175ba7a8c235ebce1 cve-icon cve-icon
https://git.kernel.org/stable/c/a78e7207564258db6e373e86294a85f9d646d35a cve-icon cve-icon
https://git.kernel.org/stable/c/e07570a8f2cfc51260c6266cb8e1bd4777a610d6 cve-icon cve-icon
https://git.kernel.org/stable/c/e9b39f1924b76abc18881e4ce899fb232dd23d12 cve-icon cve-icon
https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html cve-icon
https://lore.kernel.org/linux-cve-announce/2024122737-CVE-2024-53231-fe0f@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-53231 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-53231 cve-icon
History

Mon, 03 Nov 2025 21:30:00 +0000

Type Values Removed Values Added
References

Wed, 01 Oct 2025 21:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 06 Jan 2025 17:45:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses CWE-476
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel

Mon, 30 Dec 2024 01:30:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Low

Fri, 27 Dec 2024 14:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw() cpufreq_cpu_get_raw() may return NULL if the cpu is not in policy->cpus cpu mask and it will cause null pointer dereference.
Title cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw()
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-12-27T13:50:18.899Z

Updated: 2025-11-03T20:47:58.271Z

Reserved: 2024-11-19T17:17:25.025Z

Link: CVE-2024-53231

cve-icon Vulnrichment

Updated: 2025-11-03T20:47:58.271Z

cve-icon NVD

Status : Modified

Published: 2024-12-27T14:15:31.390

Modified: 2025-11-03T21:17:44.900

Link: CVE-2024-53231

cve-icon Redhat

Severity : Low

Publid Date: 2024-12-27T00:00:00Z

Links: CVE-2024-53231 - Bugzilla