5.5

CVE-2024-38571: linux NULL Pointer Dereference

CVSS: 5.5v3.1MediumModified
AliasesUBUNTU-CVE-2024-38571DEBIAN-CVE-2024-38571
Published 19-06-2024Last modified 11-05-2026
Open JSON

Vulnerability summary

CVE-2024-38571 is a medium (CVSS 5.5) NULL Pointer Dereference vulnerability in linux. EPSS estimates a 0.23% chance of exploitation in the next 30 days, higher than 12.7% of scored vulnerabilities.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (NVD)
EPSS score
0.23%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 21 · Related 19
MGASA-2024-0263MGASA-2024-0266SUSE-SU-2024:2372-1SUSE-SU-2024:2394-1SUSE-SU-2024:2571-1SUSE-SU-2024:2896-1

Timeline

  1. 19-06-2024
    PublishedVulnerability first disclosed.
  2. 11-05-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/tsens: Fix null pointer dereference compute_intercept_slope() is called from calibrate_8960() (in tsens-8960.c) as compute_intercept_slope(priv, p1, NULL, ONE_PT_CALIB) which lead to null pointer dereference (if DEBUG or DYNAMIC_DEBUG set). Fix this bug by adding null pointer check. Found by Linux Verification Center (linuxtesting.org) with SVACE.

CVSS metrics

3 scores · 3 sources · 1 version

EPSS trend

Probability

0.23%

Chance of exploitation in the next 30 days

Percentile

13%

Versus all other CVEs

30-day change

0.00 pp

From 0.23% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.23%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu116 products
  • linux< 5.15.0-121.131 | < 6.8.0-40.40
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws< 5.15.0-1069.75 | < 6.8.0-1013.14
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ dfc1193d4dbd6c3cb68c944413146c940bde290a, < 27600e0c5272a262b0903e35ae1df37d33c5c1ad | ≥ dfc1193d4dbd6c3cb68c944413146c940bde290a, < 11c731386ed82053c2759b6fea1a82ae946e5e0f | ≥ dfc1193d4dbd6c3cb68c944413146c940bde290a, < 2d5ca6e4a2872e92a32fdfd87e04dd7d3ced7278 | ≥ dfc1193d4dbd6c3cb68c944413146c940bde290a, < 06d17744b77bc6cb29a6c785f4fad8c4163ee653 | ≥ dfc1193d4dbd6c3cb68c944413146c940bde290a, < fcf5f1b5f308f2eb422f6aca55d295b25890906b | ≥ dfc1193d4dbd6c3cb68c944413146c940bde290a, < d998ddc86a27c92140b9f7984ff41e3d1d07a48f | 5.13
  • linux_kernel≥ 5.13, < 5.15.161 | ≥ 5.16, < 6.1.93 | ≥ 6.2, < 6.6.33 | ≥ 6.7, < 6.8.12 | ≥ 6.9, < 6.9.3
Debian1 product
  • linux< 6.1.94-1 | < 6.8.12-1

3 vendors · 119 products

References

22 links
Show all 22 references