CVE-2024-56696

Summary

CVE-2024-56696 is a newly identified vulnerability in the Linux kernel. This issue lies within the ALSA (Advanced Linux Sound Architecture) component, specifically in the "core" subsystem. The flaw stems from the function 'kunit_kzalloc()' which, under certain circumstances, may return a NULL pointer. Unchecked dereferencing of this null pointer can result in a NULL dereference, potentially leading to unintended system behavior or crashes. The vulnerability has been addressed by adding NULL checks for all instances of 'kunit_kzalloc()' in the 'sound_kunit.c' file.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.