CVE-2024-42100 — clk: sunxi-ng: common: Don't call hw_to_ccu_common on hw without common

Back Back to CVE browser

MEDIUM

clk: sunxi-ng: common: Don't call hw_to_ccu_common on hw without common

Published Jul 30, 2024

5.5

MEDIUM

CVSS 3.1

EPSS 0.24%

Description

In order to set the rate range of a hw sunxi_ccu_probe calls hw_to_ccu_common() assuming all entries in desc->ccu_clks are contained in a ccu_common struct. This assumption is incorrect and, in consequence, causes invalid pointer de-references.

Remove the faulty call. Instead, add one more loop that iterates over the ccu_clks and sets the rate range, if required.

Affected products

Vendor Linux Product Linux Default
unaffected
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
  -
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
Vendor Linux Product Linux Default
unaffected
- Version
  6.6.31
  Status
  affected
  Constraints
  <6.6.39
- Version
  6.8.10
  Status
  affected
  Constraints
  <6.9
Vendor Linux Product Linux Default
affected
- Version
  6.9
  Status
  affected
  Constraints
  -
- Version
  0
  Status
  unaffected
  Constraints
  <6.9
- Version
  6.10
  Status
  unaffected
  Constraints
  <=*
- Version
  6.6.39
  Status
  unaffected
  Constraints
  <=6.6.*
- Version
  6.9.9
  Status
  unaffected
  Constraints
  <=6.9.*

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Linux

unaffected

Version	Status	Constraints
	affected
	affected	-
	affected
	affected

Linux

unaffected

Version	Status	Constraints
6.6.31	affected	<6.6.39
6.8.10	affected	<6.9

Linux

affected

Version	Status	Constraints
6.9	affected	-
0	unaffected	<6.9
6.10	unaffected	<=*
6.6.39	unaffected	<=6.6.*
6.9.9	unaffected	<=6.9.*

Red Hat Enterprise Linux 6

kernel

Not affected
Red Hat Enterprise Linux 7

kernel

Not affected
Red Hat Enterprise Linux 7

kernel-rt

Not affected
Red Hat Enterprise Linux 8

kernel

Not affected
Red Hat Enterprise Linux 8

kernel-rt

Not affected
Red Hat Enterprise Linux 9

kernel

Not affected
Red Hat Enterprise Linux 9

kernel-rt

Not affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 6	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel-rt	Not affected	n/a
Red Hat Enterprise Linux 8	kernel	Not affected	n/a
Red Hat Enterprise Linux 8	kernel-rt	Not affected	n/a
Red Hat Enterprise Linux 9	kernel	Not affected	n/a
Red Hat Enterprise Linux 9	kernel-rt	Not affected	n/a

Remediation

No remediation recorded yet.

Metrics

0.24% 0.00239

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.00239

Score over time

2024–2026

EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v3
EPSS v4
EPSS v5

Table of values (5 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	0.24% (0.00239)	13.51th	v5 (v2026.06.15)
Jun 15, 2026	0.24% (0.00239)	14.67th	v5 (v2026.06.15)
Mar 17, 2025	0.07% (0.00066)	17.64th	v4 (v2025.03.14)
Dec 12, 2024	0.04% (0.00045)	17.70th	v3 (v2023.03.01)
Jul 30, 2024	0.04% (0.00045)	16.19th	v3 (v2023.03.01)

Weaknesses (1)

CWE-476

NULL Pointer Dereference

References (8)

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2024-42100		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2301463		Issue Tracking
https://git.kernel.org/stable/c/14c78d69dbca6a28af14095f639ec4318ec07fdc		Patch
https://git.kernel.org/stable/c/7a0e2738cb6da5a55c9908dff333600aeb263e07		Patch
https://git.kernel.org/stable/c/ea977d742507e534d9fe4f4d74256f6b7f589338		Patch
https://lore.kernel.org/linux-cve-announce/2024073018-CVE-2024-42100-bc58@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2024-42100
https://www.cve.org/CVERecord?id=CVE-2024-42100