CVE-2024-56540

Summary

CVE-2024-56540 is a vulnerability affecting the Linux kernel that has been addressed. The issue was found in the accel/ivpu driver and involved preventing recovery invocations during probe and resume stages. IPC send and receive functions have been refactored to handle operations without triggering recovery processes. A new function, ivpu_send_receive_internal(), has been introduced and utilized by D0i3 entry, DCT initialization, and HWS initialization functions. These functions have been modified to return error codes instead of initiating recovery, thereby avoiding a potential race condition that could lead to undefined behavior and kernel crashes due to null pointer dereferences.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.