CVE-2024-56730
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Dec 29, 2024
Updated: Jan 7, 2025
CWE ID 476
Summary
CVE-2024-56730 is a vulnerability affecting the Linux kernel. Specifically, in the net/9p/usbg module, the handling of failed memory allocations using kzalloc() was found to be inadequate. Upon discovery, the coccinelle tool reported an error on the linux-next, next-20241108 vanilla kernel, indicating that the allocation function did not return an error pointer on failure, but instead returned NULL. This issue has been resolved by updating the code to properly handle NULL returns from kzalloc() in cases of memory exhaustion.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Linux Kernel
Affected Vendors
- LINUX