Security tracker / CVE-2024-27037

CVE-2024-27037

clk: zynq: Prevent null pointer dereference caused by kmalloc failure

References

• Debian security tracker
• cve.org

Notes

 carnil> Introduced in 0ee52b157b8e ("clk: zynq: Add clock controller driver").
 carnil> Vulnerable versions: 3.11-rc1.

Bugs

Status

Branch	Status
upstream	released (6.9-rc1) [7938e9ce39d6779d2f85d822cc930f73420e54a6]
6.18-upstream-stable	N/A "Fixed before branching point"
6.17-upstream-stable	N/A "Fixed before branching point"
6.12-upstream-stable	N/A "Fixed before branching point"
6.8-upstream-stable	released (6.8.2) [58a946ab43501f2eba058d24d96af0ad1122475b]
6.6-upstream-stable	released (6.6.23) [0801c893fd48cdba66a3c8f44c3fe43cc67d3b85]
6.1-upstream-stable	released (6.1.83) [8c4889a9ea861d7be37463c10846eb75e1b49c9d]
5.10-upstream-stable	needed
sid	released (6.7.12-1)
6.12-trixie-security	N/A "Fixed before branching point"
6.1-bookworm-security	released (6.1.85-1)
5.10-bullseye-security	needed