CVE-2024-56739
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Dec 29, 2024
Updated: Jan 7, 2025
CWE ID 908
Summary
CVE-2024-56739 is a vulnerability affecting the Linux kernel. In the function rtc_timer_do_work(), if the __rtc_read_time call fails, the struct rtc_time tm may contain uninitialized data or an illegal date/time from the RTC hardware. This can result in a very large value when converting the time to a ktime using rtc_tm_to_ktime. If there are periodic timers in rtc->timerqueue, they will continually expire, potentially causing kernel softlockups. This issue has been resolved in the latest Linux kernel version.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.