U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Vulnerability Change Records for CVE-2024-26975

Change History

New CVE Received by NIST 5/01/2024 2:15:14 AM

Action Type Old Value New Value
Added Description

								
							
							
						
In the Linux kernel, the following vulnerability has been resolved:

powercap: intel_rapl: Fix a NULL pointer dereference

A NULL pointer dereference is triggered when probing the MMIO RAPL
driver on platforms with CPU ID not listed in intel_rapl_common CPU
model list.

This is because the intel_rapl_common module still probes on such
platforms even if 'defaults_msr' is not set after commit 1488ac990ac8
("powercap: intel_rapl: Allow probing without CPUID match"). Thus the
MMIO RAPL rp->priv->defaults is NULL when registering to RAPL framework.

Fix the problem by adding sanity check to ensure rp->priv->rapl_defaults
is always valid.
Added Reference

								
							
							
						
kernel.org https://git.kernel.org/stable/c/0641908b906a133f1494c312a71f9fecbe2b6c78 [No types assigned]
Added Reference

								
							
							
						
kernel.org https://git.kernel.org/stable/c/2d1f5006ff95770da502f8cee2a224a1ff83866e [No types assigned]
Added Reference

								
							
							
						
kernel.org https://git.kernel.org/stable/c/2f73cf2ae5e0f4e629db5be3a4380ff7807148e6 [No types assigned]
Added Reference

								
							
							
						
kernel.org https://git.kernel.org/stable/c/9b254feb249981b66ccdb1dae54e757789a15ba1 [No types assigned]