Medium 5.5Published Jun 19, 2024

CVE-2024-38615cpufreq: exit() callback is optional

Updated under an hour ago (Oct 28, 2026, 12:50 PM ET)

Does this affect you?

It affects Linux and 5 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: cpufreq: exit() callback is optional The exit() callback is optional and shouldn't be called without checking a valid pointer first. Also, we must clear freq_table pointer even if the exit() callback isn't present.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 14, 2026
First seen by InfoSec Signals: Oct 14, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	91a12e91dc39137906d929a4ff6f9c32c59697fa builds before 2d730b465e377396d2a09a53524b96b111f7ccb6; from 91a12e91dc39137906d929a4ff6f9c32c59697fa before dfc56ff5ec9904c008e9376d90a6d7e2d2bec4d3; 91a12e91dc39137906d929a4ff6f9c32c59697fa builds before 35db5e76d5e9f752476df5fa0b9018a2398b0378; 91a12e91dc39137906d929a4ff6f9c32c59697fa builds before 8bc9546805e572ad101681437a49939f28777273; 91a12e91dc39137906d929a4ff6f9c32c59697fa builds before 3e99f060cfd2e36504d62c9132b453ade5027e1c; from 91a12e91dc39137906d929a4ff6f9c32c59697fa before ae37ebca325097d773d7bb6ec069123b30772872; from 91a12e91dc39137906d929a4ff6f9c32c59697fa before a8204d1b6ff762d2171d365c2c8560285d0a233d; from 91a12e91dc39137906d929a4ff6f9c32c59697fa before b8f85833c05730d631576008daaa34096bc7f3ce	CNA record
Siemens RUGGEDCOM RST2428P siemens:ruggedcom_rst2428p (from the name)	before V3.1	CISA ADP
Siemens SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family siemens:scalance_xc_300_xr_300_xc_400_xr_500wg_xr_500_family (from the name)	all versions not affected	CISA ADP
Siemens SCALANCE XCM-/XRM-/XCH-/XRH-300 family siemens:scalance_xcm_xrm_xch_xrh_300_family (from the name)	before V3.1	CISA ADP
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem (from the name)	before V1.1.1	CISA ADP
linux linux_kernel linux:linux_kernel	from 5.1 before 5.4.278; from 5.5 before 5.10.219; from 5.11 before 5.15.161; from 5.16 before 6.1.93; from 6.2 before 6.6.33; from 6.7 before 6.8.12; from 6.9 before 6.9.3	NVD

References

References

https://git.kernel.org/stable/c/2d730b465e377396d2a09a53524b96b111f7ccb6	patch
https://git.kernel.org/stable/c/dfc56ff5ec9904c008e9376d90a6d7e2d2bec4d3	patch
https://git.kernel.org/stable/c/35db5e76d5e9f752476df5fa0b9018a2398b0378	patch
https://git.kernel.org/stable/c/8bc9546805e572ad101681437a49939f28777273	patch
https://git.kernel.org/stable/c/3e99f060cfd2e36504d62c9132b453ade5027e1c	patch
https://git.kernel.org/stable/c/ae37ebca325097d773d7bb6ec069123b30772872	patch
https://git.kernel.org/stable/c/a8204d1b6ff762d2171d365c2c8560285d0a233d	patch
https://git.kernel.org/stable/c/b8f85833c05730d631576008daaa34096bc7f3ce	patch
https://cert-portal.siemens.com/productcert/html/ssa-265688.html
https://cert-portal.siemens.com/productcert/html/ssa-613116.html

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.