CVE-2024-56621
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Dec 27, 2024
Updated: Mar 7, 2025
CWE ID 476
Summary
CVE-2024-56621 is a Linux kernel vulnerability affecting the scsi: ufs driver. In the function ufshcd_remove(), RTC work is not cancelled, leading to a NULL pointer dereference when the RTC work is triggered after ufshcd is removed. Since RTC work accesses ufshcd internal structures, it should be cancelled during ufshcd_remove() to prevent this issue. The vulnerability can result in a kernel panic and potential system instability. The issue has been resolved by properly cancelling RTC work in ufshcd_remove() as per the order in ufshcd_init().
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Linux Kernel
Affected Vendors
- LINUX