#VU102126 NULL pointer dereference in Linux kernel - CVE-2024-56569

Vulnerability identifier: #VU102126

Vulnerability risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-56569

CWE-ID: CWE-476

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor: Linux Foundation

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the ftrace_mod_callback() function in kernel/trace/ftrace.c. A local user can perform a denial of service (DoS) attack.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Linux kernel: All versions

---

External links
https://git.kernel.org/stable/c/19cacabdd5a8487ae566cbecb4d03bcb038a067e
https://git.kernel.org/stable/c/43ca32ce12888fb0eeb2d74dfc558dea60d3473e
https://git.kernel.org/stable/c/45af52e7d3b8560f21d139b3759735eead8b1653
https://git.kernel.org/stable/c/5dabb7af57bc72308a6e2e81a5dd756eef283803
https://git.kernel.org/stable/c/7ae27880de3482e063fcc1f72d9a298d0d391407
https://git.kernel.org/stable/c/885109aa0c70639527dd6a65c82e63c9ac055e3d
https://git.kernel.org/stable/c/8a92dc4df89c50bdb26667419ea70e0abbce456e

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.