CVE-2024-56708

Summary

CVE-2024-56708 is a recently identified vulnerability in the Linux kernel. This issue affects the EDAC/igen6 driver and can lead to a segmentation fault during module unload. The root cause of this vulnerability lies in the modprobe and rmmod processes. Specifically, during modprobe, igen6_pvt is allocated using kzalloc() and later, in rmmod, mci->pvt_info, which points to &igen6_pvt->imc[mc], is freed using kfree(). This results in a double-free error and ultimately, a segmentation fault. To mitigate this issue, it is recommended to set mci->pvt_info to NULL before freeing igen6_pvt to avoid the double kfree.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.