CVE-2024-56587

Summary

CVE-2024-56587: A vulnerability in the Linux kernel's LED subsystem allows for a NULL pointer issue when Process A adds a hid device, resulting in a kernel panic if Process B later attempts to access the LED class device's attributes. This issue can be resolved by using mutex led_cdev->led_access to protect access to led->cdev and its attributes inside brightness_show() and max_brightness_show(). The vulnerability was identified during the addition and removal of LED devices in the system. The call stack includes functions such as hid_device_probe, ps_led_register, and devm_led_classdev_register_ext. The vulnerability results in a kernel NULL pointer dereference, causing a system crash.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.