CVE-2024-38615 Details
Description
In the Linux kernel, the following vulnerability has been resolved: cpufreq: exit() callback is optional The exit() callback is optional and shouldn't be called without checking a valid pointer first. Also, we must clear freq_table pointer even if the exit() callback isn't present.
A vulnerability in the Linux kernel's cpufreq subsystem allows the exit() callback to be called without first verifying the validity of the pointer. This issue could lead to unintended behavior, as the freq_table pointer may not be properly cleared if the exit() callback is absent. The vulnerability affects the Linux kernel through version 6.4.9.
Users can update to Linux kernel versions 6.4.9 or later, where this vulnerability has been addressed.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jun 24, 2024References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-476 | NULL Pointer Dereference | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 5.1, < 5.4.278 >= 5.5, < 5.10.219 >= 5.11, < 5.15.161 >= 5.16, < 6.1.93 >= 6.2, < 6.6.33 >= 6.7, < 6.8.12 >= 6.9, < 6.9.3 |
CPE
Remediation
| |
Change History
7 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jun 17, 2026 | CVE Modified | siemens-SADP |
| May 12, 2026 | CVE Modified | siemens-SADP |
| Oct 3, 2025 | Initial Analysis | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| Jun 19, 2024 | New CVE Received | kernel.org |