CVE-2024-56577

Summary

CVE-2024-56577 is a kernel vulnerability affecting the Linux media driver mtk-jpeg. The issue arises due to the failure to destroy the workqueue in mtk_jpeg_core.c after a commit, leading to a null-pointer dereference. This vulnerability can be easily exploited, causing a kernel panic and potentially allowing attackers to gain unauthorized access or execute arbitrary code. The affected commit refactored some variables, but failed to account for the workqueue destruction. The call trace shows the sequence of functions leading to the null-pointer dereference, including destroy_workqueue and mtk_jpegdec_destroy_workqueue, and the affected process was identified as modprobe with PID 1071.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.