[SRU][F][PATCH 0/2] CVE-2024-27051

[Koichiro Den]

[Impact]

cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return value

cpufreq_cpu_get may return NULL. To avoid NULL-dereference check it
and return 0 in case of error.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

[Backport]

The primary fix commit had a compile-time warning issue, which on
upstream was fixed by later commit fa7bd98f3c8b ("cpufreq:
brcmstb-avs-cpufreq: ISO C90 forbids mixed declarations").
I cherry-picked both of them.

[Fix]

Noble:  not affected
Jammy:  fixed via stable
Focal:  Backport - cleanly applied with one follow-up fix, see [Backport]
Bionic: fix sent to esm ML
Xenial: not affected
Trusty: not affected

[Test Case]

Compile and boot tested

[Where problems could occur]

This fix affects Broadcom STB SoCs that use AVS firmware with DFS and
DVFS support, an issue with this fix potentially would be visible to
user via a system crash due to null pointer dereference.


Anastasia Belova (1):
  cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return
    value

Portia Stephens (1):
  cpufreq: brcmstb-avs-cpufreq: ISO C90 forbids mixed declarations

 drivers/cpufreq/brcmstb-avs-cpufreq.c | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

-- 
2.43.0