CVE-2024-56617

Summary

CVE-2024-56617 is a vulnerability affecting the Linux kernel. It is related to the 'cacheinfo' subsystem where memory for cacheinfo is not always allocated during CPU hotplug. This issue can result in a NULL pointer dereference, leading to a kernel panic and potentially allowing an attacker to gain unauthorized access or cause a denial of service. To mitigate this vulnerability, it is recommended to ensure that cacheinfo memory is allocated during the cacheinfo CPU hotplug callback. Additionally, the function 'last_level_cache_is_valid()' should verify that the cacheinfo has been allocated before checking its validity. The vulnerability was identified during the development of commit '6539cffa9495' and can potentially impact Intel processors.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.