CVE-2024-56569

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-56569
In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix regression with module command in stack_trace_filter When executing the following command: # echo "write*:mod:ext3" > /sys/kernel/tracing/stack_trace_filter The current mod command causes a null pointer dereference. While commit 0f17976568b3f ("ftrace: Fix regression with module command in stack_trace_filter") has addressed part of the issue, it left a corner case unhandled, which still results in a kernel crash.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/19cacabdd5a8487ae566cbecb4d03bcb038a067e Patch
https://git.kernel.org/stable/c/43ca32ce12888fb0eeb2d74dfc558dea60d3473e Patch
https://git.kernel.org/stable/c/45af52e7d3b8560f21d139b3759735eead8b1653 Patch
https://git.kernel.org/stable/c/5dabb7af57bc72308a6e2e81a5dd756eef283803 Patch
https://git.kernel.org/stable/c/7ae27880de3482e063fcc1f72d9a298d0d391407 Patch
https://git.kernel.org/stable/c/885109aa0c70639527dd6a65c82e63c9ac055e3d Patch
https://git.kernel.org/stable/c/8a92dc4df89c50bdb26667419ea70e0abbce456e Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

31 Jan 2025, 15:58

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux linux Kernel
Linux
References () https://git.kernel.org/stable/c/19cacabdd5a8487ae566cbecb4d03bcb038a067e - () https://git.kernel.org/stable/c/19cacabdd5a8487ae566cbecb4d03bcb038a067e - Patch
References () https://git.kernel.org/stable/c/43ca32ce12888fb0eeb2d74dfc558dea60d3473e - () https://git.kernel.org/stable/c/43ca32ce12888fb0eeb2d74dfc558dea60d3473e - Patch
References () https://git.kernel.org/stable/c/45af52e7d3b8560f21d139b3759735eead8b1653 - () https://git.kernel.org/stable/c/45af52e7d3b8560f21d139b3759735eead8b1653 - Patch
References () https://git.kernel.org/stable/c/5dabb7af57bc72308a6e2e81a5dd756eef283803 - () https://git.kernel.org/stable/c/5dabb7af57bc72308a6e2e81a5dd756eef283803 - Patch
References () https://git.kernel.org/stable/c/7ae27880de3482e063fcc1f72d9a298d0d391407 - () https://git.kernel.org/stable/c/7ae27880de3482e063fcc1f72d9a298d0d391407 - Patch
References () https://git.kernel.org/stable/c/885109aa0c70639527dd6a65c82e63c9ac055e3d - () https://git.kernel.org/stable/c/885109aa0c70639527dd6a65c82e63c9ac055e3d - Patch
References () https://git.kernel.org/stable/c/8a92dc4df89c50bdb26667419ea70e0abbce456e - () https://git.kernel.org/stable/c/8a92dc4df89c50bdb26667419ea70e0abbce456e - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ftrace: Fix regression with module command in stack_trace_filter Al ejecutar el siguiente comando: # echo "write*:mod:ext3" > /sys/kernel/tracing/stack_trace_filter El comando mod actual provoca una desreferencia de puntero nulo. Si bien el commit 0f17976568b3f ("ftrace: Fix regression with module command in stack_trace_filter") ha solucionado parte del problema, dejó un caso extremo sin resolver, que aún da como resultado un bloqueo del kernel.
CWE CWE-476

27 Dec 2024, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-12-27 15:15

Updated : 2025-01-31 15:58

NVD link : CVE-2024-56569

Mitre link : CVE-2024-56569

CVE.ORG link : CVE-2024-56569

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference