CVE-2024-53230

Summary

CVE-2024-53230 is a newly identified vulnerability in the Linux kernel. Specifically, in the cpufreq subsystem, a null pointer dereference issue was discovered in the function cppc_get_cpu_cost(). This flaw arises when cpufreq_cpu_get_raw() returns NULL for a CPU that is not included in the policy's cpus mask, leading to a null pointer dereference in cppc_get_cpu_cost(). This vulnerability could potentially be exploited by attackers to cause a denial-of-service or gain unauthorized access, making it crucial for affected systems to be promptly updated.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.