CVE-2024-56578
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Dec 27, 2024
Updated: Jan 8, 2025
CWE ID 476
Summary
CVE-2024-56578 is a newly discovered vulnerability in the Linux kernel. Specifically, in the imx-jpeg driver, the sequence of operations has been found to be incorrect. Instead of setting the video drvdata before registering the video device, the opposite order was being used. Consequently, in the open() file ops, video_drvdata() may return NULL, leading to an oops (out-of-memory situation) or other unintended behavior. This issue has been addressed with a resolution in the latest Linux kernel updates.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.