CVE-2024-27037 | BDVDB-2026-233236 Detail

Description#

In the Linux kernel, the following vulnerability has been resolved: clk: zynq: Prevent null pointer dereference caused by kmalloc failure The kmalloc() in zynq_clk_setup() will return null if the physical memory has run out. As a result, if we use snprintf() to write data to the null address, the null pointer dereference bug will happen. This patch uses a stack variable to replace the kmalloc().

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12024-05-01Record published in the CVE List.
2. Version 22026-05-11Most recent update recorded in the CVE List.