5.5

CVE-2024-58081: linux NULL Pointer Dereference

CVSS: 5.5v3.1MediumModified
AliasesUBUNTU-CVE-2024-58081USN-7493-1DEBIAN-CVE-2024-58081
Published 06-03-2025Last modified 23-05-2026
Open JSON

Vulnerability summary

CVE-2024-58081 is a medium (CVSS 5.5) NULL Pointer Dereference vulnerability in linux. EPSS estimates a 0.18% chance of exploitation in the next 30 days, higher than 7% of scored vulnerabilities.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (CVE.org)
EPSS score
0.18%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 11 · Related 12
USN-7521-1USN-7521-3USN-7651-1USN-7651-2USN-7651-3USN-7651-4

Timeline

  1. 06-03-2025
    PublishedVulnerability first disclosed.
  2. 23-05-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: clk: mmp2: call pm_genpd_init() only after genpd.name is set Setting the genpd's struct device's name with dev_set_name() is happening within pm_genpd_init(). If it remains NULL, things can blow up later, such as when crafting the devfs hierarchy for the power domain: Unable to handle kernel NULL pointer dereference at virtual address 00000000 when read ... Call trace: strlen from start_creating+0x90/0x138 start_creating from debugfs_create_dir+0x20/0x178 debugfs_create_dir from genpd_debug_add.part.0+0x4c/0x144 genpd_debug_add.part.0 from genpd_debug_init+0x74/0x90 genpd_debug_init from do_one_initcall+0x5c/0x244 do_one_initcall from kernel_init_freeable+0x19c/0x1f4 kernel_init_freeable from kernel_init+0x1c/0x12c kernel_init from ret_from_fork+0x14/0x28 Bisecting tracks this crash back to commit 899f44531fe6 ("pmdomain: core: Add GENPD_FLAG_DEV_NAME_FW flag"), which exchanges use of genpd->name with dev_name(&genpd->dev) in genpd_debug_add.part().

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.18%

Chance of exploitation in the next 30 days

Percentile

7%

Versus all other CVEs

30-day change

0.00 pp

From 0.18% on 18-09-2026

18-09-202618-10-2026
EPSS score
0.18%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu103 products
  • linux< 6.8.0-64.67
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws< 6.8.0-1032.34
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ 899f44531fe6cac4b024710fec647ecc127724b8, < eca01d5911fb34218d10a58d8d9534b758c8fd0a | ≥ 899f44531fe6cac4b024710fec647ecc127724b8, < 763517124e27b07fa300b486d7d13c5d563a215e | ≥ 899f44531fe6cac4b024710fec647ecc127724b8, < e24b15d4704dcb73920c3d18a6157abd18df08c1 | 94a03c0400c9696735184c7d76630b818d0f5cca | ≥ 6.11.10, < 6.12 | 6.12
  • linux_kernel≥ 6.11.10, < 6.12.14 | ≥ 6.13, < 6.13.3
Debian1 product
  • linux< 6.12.15-1

3 vendors · 106 products

References

20 links
Show all 20 references