CVE-2024-56554

Summary

CVE-2024-56554 is a use-after-free vulnerability affecting the Linux kernel's binder subsystem. The issue arises when a binder reference is freed while its associated freeze work is still queued in the process's work queue. This leads to a situation where the freed memory is later read or written to, causing a use-after-free condition. The vulnerability was discovered during a KASAN memory error report and was addressed by the commit that ensures any queued freeze work is removed when cleaning up a binder reference. This fix mitigates the risk of use-after-free attacks in the Linux kernel's binder subsystem.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.