01 Record

CVE-2024-53231

cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw()

MediumPUBLISHEDCNA: Linux

CNA base score5.5 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

View raw JSON

02 Description

cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw()

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.24% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 14.7% of scored records. A rank, not a probability.

NVD base score

5.5 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-06-17.

Red Hat severity

Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2024-12-27 13:50Z1 YR AGO

Last updated

2026-05-11 20:53Z3 MO AGO

Reserved

2024-11-19

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Medium (CVSS 5.5)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weaknesses

CWE-476NULL Pointer DereferenceBase

Data version

5.2

Document digest

5a6e85f5255534695480ef5ed8a49e5f75170656a446e3d061f9619a3c41b110

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux740fcdc2c20ecf855b36b919d7fa1b872b5a7eae to < a357b63fd21e4b2791008c2175ba7a8c235ebce1, 740fcdc2c20ecf855b36b919d7fa1b872b5a7eae to < e07570a8f2cfc51260c6266cb8e1bd4777a610d6, 740fcdc2c20ecf855b36b919d7fa1b872b5a7eae to < e9b39f1924b76abc18881e4ce899fb232dd23d12, 740fcdc2c20ecf855b36b919d7fa1b872b5a7eae to < 65fe2f7fdafe2698a343661800434b3f2e51041e, 740fcdc2c20ecf855b36b919d7fa1b872b5a7eae to < a78e7207564258db6e373e86294a85f9d646d35a, 5.19—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/a357b63fd21e4b2791008c2175ba7a8c235ebce1
git.kernel.orghttps://git.kernel.org/stable/c/e07570a8f2cfc51260c6266cb8e1bd4777a610d6
git.kernel.orghttps://git.kernel.org/stable/c/e9b39f1924b76abc18881e4ce899fb232dd23d12
git.kernel.orghttps://git.kernel.org/stable/c/65fe2f7fdafe2698a343661800434b3f2e51041e
git.kernel.orghttps://git.kernel.org/stable/c/a78e7207564258db6e373e86294a85f9d646d35a
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/03/msg00001.html

01 Record index

CVE-2024-53231

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2024-53231

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References