CVE-2024-56579
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Dec 27, 2024
Updated: Jan 8, 2025
CWE ID 476
Summary
CVE-2024-56579 is a newly identified vulnerability in the Linux kernel. Specifically, in the "amphion" media driver, the sequence of setting the video drvdata and registering the video device has been found to be incorrect. This misordering can result in video_drvdata() returning NULL in the open() file ops, potentially leading to an Oops (Out of Memory) error. To mitigate this issue, it is essential that the video drvdata is set before registering the video device to ensure proper functionality and stability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Linux Kernel
Affected Vendors
- LINUX