CVE-2024-58081 clk: mmp2: call pm_genpd_init() only after genpd.name is set
A null pointer dereference in the Linux kernel MMP2 clock driver causes a crash during initialization, leading to denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-58081?
CVE-2024-58081 is a medium-severity vulnerability in Linux kernel, published on 6 Mar 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
clk: mmp2: call pm_genpd_init() only after genpd.name is set
Setting the genpd's struct device's name with dev_set_name() is happening within pm_genpd_init(). If it remains NULL, things can blow up later, such as when crafting the devfs hierarchy for the power domain:
Unable to handle kernel NULL pointer dereference at virtual address 00000000 when read ... Call trace: strlen from start_creating+0x90/0x138 start_creating from debugfs_create_dir+0x20/0x178 debugfs_create_dir from genpd_debug_add.part.0+0x4c/0x144 genpd_debug_add.part.0 from genpd_debug_init+0x74/0x90 genpd_debug_init from do_one_initcall+0x5c/0x244 do_one_initcall from kernel_init_freeable+0x19c/0x1f4 kernel_init_freeable from kernel_init+0x1c/0x12c kernel_init from ret_from_fork+0x14/0x28
Bisecting tracks this crash back to commit 899f44531fe6 ("pmdomain: core: Add GENPD_FLAG_DEV_NAME_FW flag"), which exchanges use of genpd->name with dev_name(&genpd->dev) in genpd_debug_add.part().
Weakness: CWE-476
Which versions are affected by CVE-2024-58081?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2024-58081?
Apply the vendor's patch.
Is CVE-2024-58081 being exploited?
There is no known exploitation of CVE-2024-58081 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2024-58081, DEBIAN-CVE-2024-58081, GHSA-gqmm-fccw-xjf3, ROOT-OS-UBUNTU-2404-CVE-2024-58081, UBUNTU-CVE-2024-58081, USN-7493-1.