CVE-2024-56588
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Dec 27, 2024
Updated: Jan 9, 2025
CWE ID 476
Summary
CVE-2024-56588: A vulnerability in the Linux kernel's hisi_sas driver causes a kernel NULL pointer dereference and subsequent system hang. The issue occurs when debugfs files are created during a dump process, but are not created during initialization. When the driver is unbound while debugfs files are being created, a NULL pointer dereference occurs, resulting in a system hang. To mitigate this issue, the driver must create all necessary directories and files during debugfs initialization to ensure proper memory allocation.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.