CVE-2024-56574
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Dec 27, 2024
Updated: Jan 6, 2025
CWE ID 476
Summary
CVE-2024-56574 is a vulnerability affecting the Linux kernel where a null-pointer dereference occurs during the probing process of the 'ts2020' driver. This issue was discovered when executing a command to dynamically register an i2c device without providing platform data. KASAN identified the null-ptr-deref error in the 'ts2020_probe()' function, which caused the system to crash. To mitigate this issue, developers should add checks to ensure that platform data is available before accessing it during the probing process.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.