Kernel Vulnerability in Linux Affecting Power Management Features

CVE-2024-58081

Summary

A vulnerability in the Linux Kernel related to the power management subsystem can lead to a null pointer dereference during device initialization. The lack of a properly set device name for the power domain can result in a system crash when creating the device filesystem hierarchy. This is triggered by modifications in the power management domain handling, notably within the pm_genpd_init() function, indicating a requirement for improved safeguards during device configuration. This vulnerability emphasizes the critical nature of proper initialization procedures within kernel components.

References